Glassworm malware returns in third wave of malicious VS Code packages

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms.
The Register on MSN

Stealthy browser extensions waited years before infecting 4.3M Chrome, Edge users with backdoors and spyware

And some are still active in the Microsoft Edge store A seven-year malicious browser extension campaign infected 4.3 million ...