VS Code Extensions

GlassWASM Malware Hidden in Open VSX Extensions

• Malware

GlassWASM Malware Hidden in Open VSX Extensions

Do Son June 20, 2026 0

GlassWASM malware hides WebAssembly payloads in trojanized Open VSX extensions, abusing Solana memos for stealthy command-and-control.

Single Actor Bypassed Open VSX Security with “Disposable” Tools

• Cybercriminals

Single Actor Bypassed Open VSX Security with “Disposable” Tools

Do Son May 1, 2026 0

Yeeth Security uncovers a sophisticated Open VSX campaign using string-fragment reconstruction to hide malware. 16 malicious extensions identified.

The Invisible Patch: How PolinRider Rewrites Git History to Hide North Korean Malware

• Malware

The Invisible Patch: How PolinRider Rewrites Git History to Hide North Korean Malware

Do Son April 17, 2026 0

PolinRider targets 1,900+ GitHub repos using "history-falsification" to hide malware. DPRK's Lazarus Group uses fake job tests to breach developers.

GlassWorm Abuses VS Code Extensions to Fuel Supply Chain Attacks

• Malware

GlassWorm Abuses VS Code Extensions to Fuel Supply Chain Attacks

Do Son March 17, 2026 0

Socket Research exposes how GlassWorm malware abuses Open VSX dependencies for transitive delivery of an RCE backdoor using Solana blockchain dead drops.

Open VSX Hijacked: “GlassWorm” Malware Poisons VS Code Extensions

• Malware

Open VSX Hijacked: “GlassWorm” Malware Poisons VS Code Extensions

Do Son February 5, 2026 0

GlassWorm malware found in Open VSX extensions. Hackers stole AWS & SSH keys from macOS devs using Solana C2. 22k+ downloads affected. Check your tools.

“Evelyn Stealer” Weaponizes Visual Studio Code Extensions

• Malware

“Evelyn Stealer” Weaponizes Visual Studio Code Extensions

Do Son January 21, 2026 0

Trend Micro reveals Evelyn Stealer, a malware campaign weaponizing Visual Studio Code extensions. It uses DLL injection to steal developer secrets & crypto.

macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets

• Malware

macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets

Do Son January 6, 2026 0

GlassWorm Wave 4 targets macOS developers via VS Code, using encrypted payloads and a 15-minute fuse to trojanize Ledger and Trezor wallet apps.