GlassWorm Hides a RAT Inside a Malicious Chrome Extension

**Executive Summary:** The report analyzes 'GlassWorm', a sophisticated supply-chain malware campaign that delivers a multi-stage information-stealing framework via compromised npm/PyPI/GitHub/VSX packages; it uses Solana memos and DHT lookups for resilient C2, exfiltrates developer/cloud/crypto credentials and session tokens, force-installs a malicious Chrome extension posing as Google Docs Offline, and maintains robust persistence and remote control capabilities—extensive IOCs (IPs, URLs, wallet addresses, hashes, file paths, registry keys) are provided to support detection and remediation.