GlassWorm: Invisible-Code Supply Chain Worm Attack
GlassWorm: The Invisible Unicode Supply Chain Worm Targeting CI/CD Pipelines Date Observed: October 2025 – ongoing (March 2026) Ecosystem: VS Code/OpenVSX extensions, npm packages, GitHub repositories Attack Type: Stealthy supply-chain compromise → hidden payload execution → credential theft → lateral spread Key Takeaways: GlassWorm is a highly stealthy supply-chain malware campaign that emerged in October […]