Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Timeline

GlassWorm

Supply-chain campaign activating 73 dormant OpenVSX VS Code extensions as malicious on 27 April 2026.

3 of 3 entries (3 events, 0 interactions)

Filters
#2 29 Apr

Turned 73 dormant OpenVSX VS Code extensions malicious via staged updates

Cybersecurity: Threats and Defences: SAP npm packages hit in TeamPCP credential theft