The Visual Studio Marketplace and the Open VSX Registry users are targeted once again with infostealing malware.

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms.

While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...