Skip to content

Image: cdn.sanity.io · rights & removal

Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX

Reporting by Socket Security BlogRead the original at socket.dev

Objectivity score: 61 out of 100.
Difficulty 80 out of 100 (Expert)— Read Analysis
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX. - Kirill Boychenko Socket uncovered a theme cluster spanning four Visual Studio Marketplace and six Open VSX extensions, including two confirmed malicious extensions and a high-confidence link to GlassWorm.
Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX | Huntaegis