Cybersecurity Alert: GlassWorm Malware Targeting VS Code Extensions
Cybersecurity experts have identified a significant malware threat linked to Microsoft Visual Studio Code (VS Code) extensions on the Open VSX repository. Dubbed the GlassWorm campaign, this attack involves 73 cloned extensions designed to steal sensitive information.
The malicious extensions, published earlier this month, masquerade as legitimate tools, utilizing similar names and icons to trick developers into downloading them. Six of the extensions have been confirmed as harmful, while others serve as sleeper packages, waiting to activate once installed.
Developers using VS Code and other integrated development environments may be at risk, as the malware can install a remote access trojan and siphon off personal data, including credentials.
To protect against this threat, users are advised to verify the authenticity of extensions before installation and regularly check for updates from trusted sources.
Risk Level: High.
Source: View Original Report
