GlassWorm Compromises VS Code Extensions in Supply Chain Attack

Cybersecurity researchers have identified a self-propagating worm, dubbed GlassWorm by Koi Security, which spreads through Visual Studio Code extensions on the Open VSX Registry and Microsoft Extension Marketplace, highlighting the increasing vulnerability of developers to cyberattacks. This marks the second supply chain attack targeting the DevOps sector within a short timeframe.

Want More Context? 🔎