An extension I used almost every day was bought by a new owner and loaded up with spyware. It happened in 2024, but Google only removed it this week.

A massive, self-replicating GlassWorm supply-chain attack has compromised hundreds of code repositories and extensions on GitHub, npm, and Open VSX.

Data is gold, and some companies go to great lengths to collect it, save it, and sell it. But you can stop it. Here's how.

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

GitHub has a ton of amazing projects within, and this app helps you find interesting ones you might want to use on your ...

The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research.

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...

Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.

Built on Envoy' delivers freely available, community-driven extensions that solve the most common obstacles to Envoy adoption for AI workloads.SAN ...

You also get to escape Microsoft telemetry tracking too.

One IDE to rule them all. You won't want to use anything else.