— The hackers behind the GlassWorm malware have re-infiltrated OpenVSX with three new malicious extensions for Visual Studio Code.
It hides malicious JavaScript code using invisible Unicode characters.
GlassWorm has worm functionality and can self-propagate: using stolen victim credentials, it infects other extensions to which the victims have access.