Skip to content
Briefings are running a touch slower this week while we rebuild the foundations.See roadmap
Timeline

GlassWorm

Supply-chain campaign activating 73 dormant OpenVSX VS Code extensions as malicious on 27 April 2026.

2 of 2 entries (2 events, 0 interactions)

Filters
#35 May

Mentioned in: UNC1069 planted WAVESHAPER.V2 in Axios via maintainer phishing

Cybersecurity: Threats and Defences
#229 Apr

Turned 73 dormant OpenVSX VS Code extensions malicious via staged updates

Cybersecurity: Threats and Defences: Three supply-chain hits in thirteen days
← Back to GlassWorm