https://ai-blog.noorshomelab.dev/tags/malware/Recent content in Malware on AI VOIDHugoenSun, 15 Feb 2026 00:00:00 +0000https://ai-blog.noorshomelab.dev/news/glassworm-malware-updates/Sun, 15 Feb 2026 00:00:00 +0000https://ai-blog.noorshomelab.dev/news/glassworm-malware-updates/<h2 id="tldr">TL;DR</h2> <p>Glassworm malware has made a significant return, marking its third wave of attacks primarily targeting <strong>Visual Studio Code (VS Code) packages and extensions</strong>. Developers are urged to exercise extreme caution.</p> <ul> <li><strong>Third Wave Active:</strong> Glassworm has resurfaced on both the OpenVSX and Microsoft Visual Studio Marketplaces.</li> <li><strong>VS Code Extensions Targeted:</strong> Malicious extensions are the primary infection vector, impacting developer environments.</li> <li><strong>Self-Propagating &amp; Ransomware:</strong> The malware exhibits self-propagating capabilities and includes basic ransomware functionalities.</li> <li><strong>Supply Chain Risk:</strong> This resurgence highlights critical vulnerabilities in the software supply chain for developer tools.</li> <li><strong>Immediate Action Required:</strong> Developers should audit installed extensions, prioritize trusted sources, and implement robust security practices.</li> </ul> <h2 id="key-developments-glassworms-third-wave">Key Developments: Glassworm&rsquo;s Third Wave</h2> <h3 id="glassworms-resurgence-in-vs-code-marketplaces">Glassworm&rsquo;s Resurgence in VS Code Marketplaces</h3> <p>The Glassworm campaign, first identified in October 2025, has re-emerged in its third wave, actively compromising extensions available on both the OpenVSX Registry and the official Microsoft Visual Studio Marketplace. This widespread distribution channel significantly increases the potential for developer infection.</p>https://ai-blog.noorshomelab.dev/troubleshooting/glassworm-malware-infection-troubleshooting/Tue, 06 Jan 2026 00:00:00 +0000https://ai-blog.noorshomelab.dev/troubleshooting/glassworm-malware-infection-troubleshooting/<h2 id="what-is-this-error">What is This Error?</h2> <p>The &ldquo;GlassWorm Malware Infection&rdquo; refers to a sophisticated, self-spreading supply-chain attack that targets developers using the OpenVSX and Microsoft Visual Studio Code marketplaces. This malware typically injects itself into seemingly legitimate VS Code extensions, which developers then download and install. Once active, GlassWorm aims to steal sensitive credentials, cryptocurrency, and establish persistence on the infected system. It&rsquo;s a critical security threat that can compromise development environments and intellectual property.</p>