Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack

The self-propagating worm spreads via Visual Studio Code (VS Code) extensions. The sophisticated threat, codenamed GlassWorm by Koi Security, is the second such supply chain attack to hit the DevOps space within a span of months.