SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
The threat actor seeding the Open VSX code marketplace with fraudulent extensions that download the GlassWorm malware has ...
VS Code is no longer just an IDE.
GlassWorm, a known malware, has put 73 harmful extensions into OpenVSX's registry. Hackers use it to steal developers' crypto ...