GlassWorm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace | Koi Blog
GlassWorm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace | Koi Blog
www.koi.ai
GlassWorm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace | Koi Blog
Alternative press article: https://www.bleepingcomputer.com/news/security/self-spreading-glassworm-malware-hits-openvsx-vs-code-registries/
Identified extensions are mainly on OpenVSX - an alternative VS Code Extension Marketplace.
Update (Oct 19, 2025): A new infected extension detected in Microsoft's VSCode marketplace - still active.
Bleepingcomputer:
Microsoft has removed the malicious extension frrom its marketplace following the researchers' alert.