GlassWorm supply chain — 72 malicious VSCode extensions, 9 million installs
Date: 2026-03
Affected: OpenVSX, GitHub, npm — 9 million installs across 433 components
Attack vector: supply-chain
Category: real-world
Severity: Critical

Supply chain campaign targeting developers via 72 malicious OpenVSX extensions and 151+ GitHub repositories. 9 million installs. 433 compromised components. Used invisible Unicode characters to encode payloads. Targeted crypto wallets, credentials, SSH keys. Extensions mimicked AI coding assistant tools.

Impact: Mass credential theft; crypto wallet compromise; developer environment compromise at scale

Mitigations:
Code signing for marketplace extensions
Extension provenance verification
Runtime monitoring for extension network activity

Architectural layers (MAESTRO):
label: Agent Ecosystem
notes: Malicious extensions published to VSCode/OpenVSX marketplaces
role: origin
label: Deployment & Infrastructure
notes: Credential theft, crypto wallet compromise, SSH key exfiltration
role: impact