GlassWorm Invades GitHub, NPM, VS Code, and Python

GlassWorm is a coordinated, cross-ecosystem supply-chain campaign that compromised 433+ GitHub repositories, npm packages, VSCode/Open-VSX extensions, and Python projects by using ecosystem-specific obfuscation (invisible Unicode in JS, base64→zlib→XOR in Python) to deliver a common Node.js-based infostealer; operators use a Solana blockchain address for immutable C2 and host payloads on shared infrastructure (multiple IPs), with active exploitation confirmed and indicators (Solana address, IPs, code fingerprints, persistence artifacts) published by multiple vendors.