GlassWorm Loader Hits Open VSX via Developer Account Compromise

Blogs

Threat actors compromised four oorzc Open VSX extensions with more than 22,000 downloads, pushing malicious versions that install a staged loader, evade Russian-locale systems, pull C2 from Solana memos, and steal macOS credentials and wallets.

Visit Site

Blogs Socket

BlogsFree Business Plan Upgrades for Open Source MaintainersSocket BlogsWhy Socket Joined the Open Source Security FoundationSocket BlogsSecuring the Financial Frontier: How Capital One Uses Socket for Open Source SecuritySocket BlogsSuno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music ScrapingSocket BlogsWhen Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open LetterSocket BlogsAnthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket LearnCalling Your Video Game With Your Phone: Part 1Deepgram Blogs5 Reasons to Keep Contributing to Open-Source Projects - Deepgram Blog ⚡️Deepgram NewsIntel Unveils Next Generation Neuromorphic Computing ChipThenewstack NewsGrafana Is Not Worried About AWS CommercializationThenewstack NewsGoogle Anthos from the Eyes of a Kubernetes DeveloperThenewstack NewsIntegrate Jupyter Notebooks with GitHubThenewstack ResourcesModule version numbering - The Go Programming LanguageGo BlogsHow Ramp automated receipt processing with fine-tuned LLMsModal BlogsRevisiting Docker Hub Policies: Prioritizing Developer ExperienceDocker BlogsDockerCon LIVE with theCUBE: Call for Papers is OpenDocker BlogsSupporting the jsDelivr open source CDN with bandwidth for developersBunny

Blogs10 Best AI Video Tools for Sales Prospecting (2026)Heygen ResourcesTwo-factor AuthenticationVercel ResourcesUsing Web AnalyticsVercel