Search: “Open VSX”

22 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 20 Vulnerability 6 Data breach 5 Ransomware 5 Threat actor 4 Exploit / PoC 1 Industry 1 AI safety & security 1

SeverityAll critical 12 high 22 medium 8 low 1 info 0

Open VSX Supply Chain Attack Used Compromised Dev Account to Spread GlassWorm

The Hacker NewsFeb 2, 15:31 UTC · Feb 2, 2026Malware

42

Eclipse Foundation Revokes Leaked Open VSX Tokens Following Wiz Discovery

The Hacker NewsNov 6, 04:40 UTC · Nov 6, 2025Malware

42

VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX

The Hacker NewsJan 6, 14:17 UTC · Jan 6, 2026Threat actor

57

Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX Extensions

The Hacker NewsFeb 4, 06:26 UTC · Feb 4, 2026Malware

42

GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware

42

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools

The Hacker NewsDec 3, 06:36 UTC · Dec 3, 2025Malware

42

The Solidity Language open-source package was used in a $500,000 crypto heist

Kaspersky SecurelistJul 10, 11:00 UTC · Jul 10, 2025Malware

42

Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack

The Hacker NewsOct 24, 07:00 UTC · Oct 24, 2025Malware

42

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets

The Hacker NewsMar 11, 12:57 UTC · Mar 11, 2026Data breach CVE-2026-28353

60

GlassWorm Attack Uses Stolen GitHub Tokens to Force

The Hacker NewsMar 21, 07:03 UTC · Mar 21, 2026Data breach

57

First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Threat actor

57

TeamPCP Backdoors LiteLLM Versions 1.82.7

The Hacker NewsMar 25, 06:43 UTC · Mar 25, 2026Malware

42

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

The Hacker NewsApr 6, 06:40 UTC · Apr 6, 2026Vulnerability1

42

Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets

The Hacker NewsMar 24, 06:31 UTC · Mar 24, 2026Data breach

57

GitHub, Grafana Labs breaches traced back to TanStack supply chain compromise

Help Net SecurityMay 21, 00:00 UTC · May 21, 2026Vulnerability1

42

ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories

The Hacker NewsJan 1, 15:52 UTC · Jan 1, 2026Malware CVE-2023-26359 CVE-2023-38205 CVE-2023-44353+7 CVEs

47

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

The Hacker NewsMay 27, 15:23 UTC · May 27, 2026Malware

42

Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware

The Hacker NewsApr 28, 04:06 UTC · Apr 28, 2026Malware

42

Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack

The Hacker NewsApr 27, 14:19 UTC · Apr 27, 2026Ransomware

57

TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials

The Hacker NewsMar 25, 06:34 UTC · Mar 25, 2026Data breach CVE-2026-336341

60

Vibe-Coded Malicious VS Code Extension Found with Built

The Hacker NewsNov 7, 09:00 UTC · Nov 7, 2025Ransomware1

57