Open VSX Supply Chain Attack Used Compromised Dev Account to Spread GlassWorm
Open VSX supply chain attack hijacked VS Code extensions delivered GlassWorm malware stealing macOS, crypto, and developer data.
More info