A massive, self-replicating GlassWorm supply-chain attack has compromised hundreds of code repositories and extensions on GitHub, npm, and Open VSX.
I gave AI my files. It gave me three subscriptions back.