Self-Spreading ‘GlassWorm’ Infects VS Code Extensions in Widespread Supply Chain Attack

Written by:

Self-Spreading ‘GlassWorm’ Infects VS Code Extensions in Widespread Supply Chain Attack

Cybersecurity researchers have discovered a self-propagating worm that spreads via Visual Studio Code (VS Code) extensions on the Open VSX Registry and the Microsoft Extension Marketplace, underscoring how developers have become a prime target for attacks.
The sophisticated threat, codenamed GlassWorm by Koi Security, is the second such supply chain attack to hit the DevOps space within a span

Source: https://thehackernews.com/2025/10/self-spreading-glassworm-infects-vs.html

#wormspreads #codenamedglassworm #spreadingglassworm #threatcodenamed #propagatingworm

Leave a comment

Design a site like this with WordPress.com
Get started