search
VS Code Marketplace
Trends
- 1Malicious VS Code extensions tied to GlassWorm spread via theme disguises●⚠️ CRITICAL: Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX GlassWorm
Threat actors have published malicious extensions on the Visual Studio Marketplace and Open VSX that pose as legitimate themes but carry hidden loaders linked to the GlassWorm campaign. Developers installing these add-ons risk having malicious code loaded into their development environments. Security researchers are warning users to review installed extensions and treat popular marketplace entries with caution.