Poisoned Pipeline / Incidents / AS55
GlassWorm across GitHub, npm, Open VSX, VS Code, Python
Git / GitHubnpmVS Code / IDEPyPIBrowser extensions
OpenSourceMalware reported GlassWorm compromising 430+ GitHub projects
by using four ecosystems at once (GitHub, npm, Open VSX / VS Code,
Python). Multi-ecosystem implants so cleaning one registry does not
clear the campaign. Socket (2 Oct 2026) tied a VS Code theme cluster
to the same loader: the Marketplace build of Cosmic Nebula Themes
reused the previously documented Solana address, AES key, and eval
model. Coca-Cola Christmas and Aurora Borealis Studio Theme shared
the cluster's development artifacts; Marketplace removed the reported
extensions after disclosure.
Mapped techniques
- T0111 Malicious code contribution to an open-source repository
- T0109 Publish malicious artifact
- T0154 Malicious IDE extension
- T0169 Push implants across repositories
supply-chain Multi-ecosystem implants
430+ GitHub projects in the blast radius.
Parallel publishes to npm, Open VSX, and PyPI.
Open VSX / VS Code as a delivery path.
Four ecosystems so remediation in one place is not enough.
Sources
- https://opensourcemalware.com/blog/glassworm-invades-github-npm-open-vsx-and-vs-code
- https://socket.dev/blog/glasswasm-malware-open-vsx-extensions
- https://checkmarx.com/zero-post/glassworm-targets-developer-ides-again-hiding-staged-malware-behind-runtime-rebuilt-loaders/
- https://socket.dev/blog/glassworm-sleeper-extensions-activated-on-open-vsx
- https://socket.dev/blog/open-vsx-transitive-glassworm-campaign
- https://socket.dev/blog/glassworm-loader-hits-open-vsx-via-suspected-developer-account-compromise
- https://www.aikido.dev/blog/glassworm-returns-unicode-attack-github-npm-vscode
- https://www.koi.ai/blog/glassworm-hits-mcp-5th-wave-with-new-delivery-techniques
- https://socket.dev/blog/glassworm-vscode-themes