Trojanized OpenVSX Extension Spreads GlassWorm Across VS Code, Cursor, and Windsurf

A fake developer extension published on the OpenVSX marketplace is silently spreading a known malware strain called GlassWorm to every code editor installed on a developer’s machine. The malicious package disguises itself as a legitimate productivity tool and uses a compiled native binary to quietly infect VS Code, Cursor, Windsurf, and several other editors all […]

The post Trojanized OpenVSX Extension Spreads GlassWorm Across VS Code, Cursor, and Windsurf appeared first on Cyber Security News.