OpenVSX

The Trojan Update: How “GlassWorm” Developers are Using Sleeper Extensions to Hijack Workspaces iden

iden

The Trojan Update: How “GlassWorm” Developers are Using Sleeper Extensions to Hijack Workspaces

ddos April 29, 2026

The GlassWorm campaign has resurfaced within the developer community, though the adversaries have adopted a more surreptitious...

Security Subverted: How TeamPCP Poisoned Checkmarx KICS to Harvest Cloud Secrets Pod Setup Code

Pod Setup Code

Security Subverted: How TeamPCP Poisoned Checkmarx KICS to Harvest Cloud Secrets

ddos March 26, 2026

Yet another devastating supply chain bombardment has struck at the heart of ubiquitous developmental instruments. On this...

The Developer’s Trap: How AI IDEs Like Cursor and Windsurf Risked a Silent Supply Chain Attack IDE-malware

IDE-malware

The Developer’s Trap: How AI IDEs Like Cursor and Windsurf Risked a Silent Supply Chain Attack

ddos January 7, 2026

Popular IDEs with AI assistants—such as Cursor, Windsurf, Google Antigravity, and Trae—have been found vulnerable to a...

Glassworm Strikes Again: Third Wave of Malicious VS Code Extensions Bypasses Moderation Nevada Ransomware Attack AMOS Stealer GodRAT DeerStealer Akira Ransomware Radix Ransomware BlackCat Leaders

Nevada Ransomware Attack AMOS Stealer GodRAT DeerStealer Akira Ransomware Radix Ransomware BlackCat Leaders

Glassworm Strikes Again: Third Wave of Malicious VS Code Extensions Bypasses Moderation

ddos December 3, 2025

The Glassworm campaign targeting popular Visual Studio Code extensions has entered yet another phase — researchers are...

TigerJack Hackers Use Malicious VSCode Extensions for Real-Time Code Theft and Cryptojacking on OpenVSX OpenVSX Cryptojacking

OpenVSX Cryptojacking

TigerJack Hackers Use Malicious VSCode Extensions for Real-Time Code Theft and Cryptojacking on OpenVSX

ddos October 16, 2025

Several extensions for Visual Studio Code, distributed via the open OpenVSX repository, have been found to contain...