this post was submitted on 23 Oct 2025
10 points (100.0% liked)

VS Code

1036 readers
1 users here now

founded 2 years ago
MODERATORS
Ategon@programming.dev
Lodra@programming.dev
10
GlassWorm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace | Koi Blog (www.koi.ai)
submitted 1 week ago by Kissaki@programming.dev to c/vscode@programming.dev
2 comments fedilink hide all child comments
 

Alternative press article: https://www.bleepingcomputer.com/news/security/self-spreading-glassworm-malware-hits-openvsx-vs-code-registries/

Identified extensions are mainly on OpenVSX - an alternative VS Code Extension Marketplace.

Update (Oct 19, 2025): A new infected extension detected in Microsoft's VSCode marketplace - still active.

Bleepingcomputer:

Microsoft has removed the malicious extension frrom its marketplace following the researchers' alert.

top 2 comments
sorted by: hot top controversial new old
[โ€“] Havatra@lemmy.zip 2 points 1 week ago (1 children)

Interesting worm, good that it's found. Dislike the AI-written sensationalistic article at Koi (their work is still good), so I appreciate the addition of the article from Bleeping Computer.

[โ€“] odelik@lemmy.today 1 points 1 week ago

It's leaps and bounds better than the Bleeping Computer AI written article. At least the Koi article appears to have utilitized original notes and an editing pass.