The supply chain campaign known as GlassWorm has once again
reared its head, infiltrating both Microsoft Visual Studio
Marketplace and Open VSX with 24 extensions impersonating popular
developer tools and frameworks like Flutter, React, Tailwind, Vim,
and Vue. GlassWorm was first documented in October 2025, detailing
its use of the Solana blockchain for command-and-control (C2) and
harvest npm,
Read more https://thehackernews.com/2025/12/glassworm-returns-with-24-malicious.html
