
- GlassWorm malware campaign expanded from VS Code Marketplace to Open VSX
- Four compromised extensions delivered macOS infostealer stealing browser data, wallets, and keychain info
- Extensions downloaded 22,000 times; attackers excluded Russian systems, hinting at Russian origin