Glassworm malware returns in third wave of malicious VS Code packages

**Executive summary:** The Glassworm campaign is a supply-chain malware campaign distributing malicious VS Code extensions on the Microsoft Visual Studio Marketplace and OpenVSX; once installed the extensions steal GitHub/npm/OpenVSX credentials and wallet data, deploy SOCKS proxies and HVNC for remote access, and use techniques like invisible Unicode obfuscation, Rust-based implants, and fake download inflation to evade detection and appear legitimate.