Self-spreading GlassWorm malware hits OpenVSX, VS Code registries

GlassWorm is a self-spreading supply-chain malware campaign that compromised multiple OpenVSX and VS Code extensions (researchers estimate ~35,800 installs). The malware hides code using invisible Unicode characters, steals GitHub/npm/OpenVSX credentials and cryptocurrency wallet data, deploys SOCKS proxies and HVNC for remote access, and uses Solana blockchain transactions (with base64 payload links), BitTorrent DHT, and Google Calendar events as resilient command-and-control and payload delivery mechanisms; multiple infected extensions and an IP-based delivery fallback were observed and some C2/payload servers remain active.