⤷ Title: TigerJack Hackers Use Malicious VSCode Extensions for Real-Time Code Theft and Cryptojacking on OpenVSX
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Oct 2025 08:22:40 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor #Code Theft #CoinIMP #Cryptojacking #Extension Supply Chain #OpenVSX #TigerJack #VSCode
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Oct 2025 08:22:40 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor #Code Theft #CoinIMP #Cryptojacking #Extension Supply Chain #OpenVSX #TigerJack #VSCode
Penetration Testing Tools
TigerJack Hackers Use Malicious VSCode Extensions for Real-Time Code Theft and Cryptojacking on OpenVSX
The TigerJack group is attacking developers via malicious VSCode extensions on OpenVSX. Plugins secretly steal C++ source code in real-time and deploy the CoinIMP cryptojacker.
⤷ Title: GlassWorm Malware Targets Developers Through OpenVSX Marketplace
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 10:22:48 +0000
════════════════════════
⌗ Tags: #Malware #Security #Blockchain #Cybersecurity #GlassWorm #Marketplace #OpenVSX #Solana #Visual Studio
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 10:22:48 +0000
════════════════════════
⌗ Tags: #Malware #Security #Blockchain #Cybersecurity #GlassWorm #Marketplace #OpenVSX #Solana #Visual Studio
Hackread
GlassWorm Malware Targets Developers Through OpenVSX Marketplace
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: Glassworm Strikes Again: Third Wave of Malicious VS Code Extensions Bypasses Moderation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Dec 2025 08:11:54 +0000
════════════════════════
⌗ Tags: #Malware #GlassWorm #Infostealer #malware #OpenVSX #supply chain attack #Unicode Obfuscation #Visual Studio Marketplace #VS Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Dec 2025 08:11:54 +0000
════════════════════════
⌗ Tags: #Malware #GlassWorm #Infostealer #malware #OpenVSX #supply chain attack #Unicode Obfuscation #Visual Studio Marketplace #VS Code
Penetration Testing Tools
Glassworm Strikes Again: Third Wave of Malicious VS Code Extensions Bypasses Moderation
The Glassworm campaign targeting popular Visual Studio Code extensions has entered yet another phase — researchers are now
⤷ Title: The Developer’s Trap: How AI IDEs Like Cursor and Windsurf Risked a Silent Supply Chain Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 04:21:36 +0000
════════════════════════
⌗ Tags: #Malware #AI IDE #Cursor #cybersecurity #DevSecOps #extension security #Google Antigravity #malware #OpenVSX #supply chain attack #Trae #VS Code #Windsurf
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 04:21:36 +0000
════════════════════════
⌗ Tags: #Malware #AI IDE #Cursor #cybersecurity #DevSecOps #extension security #Google Antigravity #malware #OpenVSX #supply chain attack #Trae #VS Code #Windsurf
Information Security News
The Developer’s Trap: How AI IDEs Like Cursor and Windsurf Risked a Silent Supply Chain Attack
Popular IDEs with AI assistants—such as Cursor, Windsurf, Google Antigravity, and Trae—have been found vulnerable to a supply-chain attack. These environments prompt users to install extensions th…
⤷ Title: The Trojan Update: How “GlassWorm” Developers are Using Sleeper Extensions to Hijack Workspaces
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:32:31 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Espionage #Developer Security #extension security #GlassWorm #malware #OpenVSX #Socket #supply chain attack #Trojan Update #Visual Studio Code #VS Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:32:31 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Espionage #Developer Security #extension security #GlassWorm #malware #OpenVSX #Socket #supply chain attack #Trojan Update #Visual Studio Code #VS Code
Penetration Testing Tools
The Trojan Update: How "GlassWorm" Developers are Using Sleeper Extensions to Hijack Workspaces
The GlassWorm campaign has resurfaced within the developer community, though the adversaries have adopted a more surreptitious operational
⤷ Title: The Neutralization of Glassworm: A Coordinated Inversion of Multi-Tiered Supply Chain Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:18:46 +0000
════════════════════════
⌗ Tags: #Malware #BitTorrent DHT malware communication #CrowdStrike GlasswormRAT analysis #developer workstation sinkhole IP #Glassworm botnet takedown #Google Calendar C2 tunneling #npm PyPI postinstall hooks #OpenVSX malicious extensions #software supply chain contamination #Solana blockchain C2 ledger #YARA threat signature rules
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:18:46 +0000
════════════════════════
⌗ Tags: #Malware #BitTorrent DHT malware communication #CrowdStrike GlasswormRAT analysis #developer workstation sinkhole IP #Glassworm botnet takedown #Google Calendar C2 tunneling #npm PyPI postinstall hooks #OpenVSX malicious extensions #software supply chain contamination #Solana blockchain C2 ledger #YARA threat signature rules
Information Security News
Glassworm Botnet Takedown: CrowdStrike Blasts Developer Malware
CrowdStrike, Google, and Shadowserver execute a major Glassworm botnet takedown, dismantling a 4-channel malware network targeting software developers.