The GlassWorm malware campaign has evolved, significantly escalating its attacks on software developers. Instead of embedding malware directly into initial releases, the threat actors are now using transitive dependencies to sneak malicious code into developer environments. This stealthy approach allows a seemingly safe package to pull in a separate, infected extension only after establishing trust. […]

The post GlassWorm Spreads via 72 Malicious Open VSX Extensions Hidden in Transitive Dependencies appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.