The threat actor seeding the Open VSX code marketplace with fraudulent extensions that download the GlassWorm malware has ...
VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.
Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...
A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...
Embrace VS Code instead of fighting it ...
Truly open-source marketplace you can use with VSCodium.
OSS can be too risky for banks and FinTechs working to meet security, governance, and compliance demands. Know the risks.
CoreWeave is launching three critical capabilities that make cross-cloud AI easier and more accessible whether by network, storage, or compute—offering CoreWeave Interconnect, SUNK Anywhere, and LOTA ...