10
GlassWorm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace | Koi Blog (www.koi.ai)
submitted 1 year ago by to c/vscode@programming.dev
2 comments fedilink hide all child comments
 

Alternative press article: https://www.bleepingcomputer.com/news/security/self-spreading-glassworm-malware-hits-openvsx-vs-code-registries/

Identified extensions are mainly on OpenVSX - an alternative VS Code Extension Marketplace.

Update (Oct 19, 2025): A new infected extension detected in Microsoft's VSCode marketplace - still active.

Bleepingcomputer:

Microsoft has removed the malicious extension frrom its marketplace following the researchers' alert.

all 2 comments

sorted by: hot top controversial new old
[–] 2 points 1 year ago (1 child)

Interesting worm, good that it's found. Dislike the AI-written sensationalistic article at Koi (their work is still good), so I appreciate the addition of the article from Bleeping Computer.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • 2 comments in c/hackernews@lemmy.bestiver.se view that post
    [–] 3 points 1 year ago

    Very cool, scary and amazing

  • permalink
  • fedilink
  • source
    •
    [–] 1 point 1 year ago*

    Time to try emacs again

  • permalink
  • fedilink
  • source
    •
    1 comment in c/programming@programming.dev view that post
    [–] 6 points 1 year ago

    Finally some spotlight for my dear Open VSX- wait, not like this!

  • permalink
  • fedilink
  • source
    •