Timeline
OpenVSX
Open-source VS Code extension registry; 73 extensions turned malicious by GlassWorm, April 2026.
5 of 5 entries (5 events, 0 interactions)
Filters
#7 3 Jun
Mentioned in: Attack worm kit now open-sourced freely
Cybersecurity: Threats and Defences#5 18 May
Mentioned in: GitHub's own code cloned via add-on
Cybersecurity: Threats and Defences#4 11 May
Mentioned in: GTIG names the first LLM-written working zero-day
Cybersecurity: Threats and Defences#3 5 May
Mentioned in: UNC1069 planted WAVESHAPER.V2 in Axios via maintainer phishing
Cybersecurity: Threats and Defences#2 29 Apr