The Glassworm malware has resurfaced on the OpenVSX marketplace, disguised within three new Visual Studio Code (VSCode) extensions. This resurgence highlights ongoing risks associated with third-party extension repositories, which often lack the rigorous security vetting found in official stores. Glassworm is known for its sophisticated capabilities, including data exfiltration and system compromise, making it a significant threat to developers and organizations relying on VSCode for software development. The malware's return on OpenVSX underscores the importance of vigilance when downloading and installing extensions, especially from less regulated sources. Users are advised to verify the authenticity of extensions and monitor for unusual system behavior. This incident serves as a reminder of the evolving tactics employed by cybercriminals to infiltrate development environments and the critical need for enhanced security measures in software supply chains.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Sat, 08 Nov 2025 22:30:16 +0000