GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers
GlassWorm campaign has escalated its supply chain attack by abusing 72 malicious extensions in the Open VSX registry, leveraging extensionPack and extensionDependencies to distribute malware to developers. The attackers use transitive dependency injection to mask the malicious nature of initially benign-looking extensions, representing a significant evolution in their propagation tactics.
Summary
GlassWorm campaign has escalated its supply chain attack by abusing 72 malicious extensions in the Open VSX registry, leveraging extensionPack and extensionDependencies to distribute malware to developers. The attackers use transitive dependency injection to mask the malicious nature of initially benign-looking extensions, representing a significant evolution in their propagation tactics.
Indicators of Compromise
- malware — GlassWorm