GLOBAL SITUATIONMONITORING
517 published briefsUTCSat, Apr 25 22:59:00
VSCode supply chain attack
Malicious VSCode and OpenVSX extensions delivering payloads, stealing tokens, and persisting via LaunchAgents.
1 intelligence brief← Intelligence Hub
-
GlassWorm macOS malware targets crypto wallets again
GlassWorm macOS malware returns via rogue VSCode/OpenVSX extensions that plant AppleScript payloads, steal developer tokens, and try to swap Ledger and Trezor apps.