EXPLAINED: Glassworm returns once again with a third round of vs code attacks | Vintage Vibes

• Glassworm campaign re-emerges with 24 malicious extensions on OpenVSX and Visual Studio marketplaces
• Malware steals GitHub, npm, wallet tokens, and deploys HVNC client with SOCKS proxy
• Targets frameworks like Flutter, React Native, Vue; Microsoft working to harden defenses

Malware is back on the OpenVSX and Microsoft Visual Studio marketplaces, researchers are warning. In mid-September this year, it was reported that cybercriminals were targeting crypto holders and developers by smuggling infostealers into open-source code repositories.