Invisible malicious code attacks 151 GitHub repos and VS Code — Glassworm attack uses blockchain to steal tokens, credentials, and secrets
tomshardware.com/tech-industry/cyber-security/malicious-packages-using-invisible-unicode-found-in-151-github-repos-and-vs-code
Story Details
| Last Updated | |
| Total Articles | 2 |
Main Topics
Similar to This
Previous
github.com Oct 02
GitHub - krdanny/tl-lang: TL (Token Language): a token-minimal programming language for LLMs that compiles to JavaScript, with benchmarks and a VS Code ...
github.com/krdanny/tl-lang
Hackers backdoor Jscrambler npm package with infostealer malware: The Jscrambler client-side web security company disclosed that a threat actor published a ...
bleepingcomputer.com/news/security/hackers-backdoor-jscrambler-npm-package-with-infostealer-malware/
GitHub disables Microsoft repos pushing password-stealing malware: Microsoft removed 73 repositories across its Azure, microsoft, Azure-Samples ...
bleepingcomputer.com/news/security/github-disables-microsoft-repos-pushing-password-stealing-malware/
scienspire.com Jun 08
If You Use Claude or Gemini, This Microsoft Breach Means Your Data Is at Risk: The Miasma worm supply chain attack on Microsoft-owned GitHub repositories targets ...
scienspire.com/article/microsoft-breach-ai-code-assistants
securityaffairs.com Jun 04
Researcher Drops a New VS Code Zero-Day After Losing Trust in Microsoft’s Disclosure Process
securityaffairs.com/193128/security/researcher-drops-a-new-vs-code-zero-day-after-losing-trust-in-microsofts-disclosure-process.html
dlvr.it Jun 03
Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures
theregister.com/security/2026/06/03/another-bug-hunter-leaks-microsoft-exploits-in-defiance-of-companys-handling-of-vulnerability-disclosures/5250590
dlvr.it May 27
CrowdStrike, Google shatter Glassworm botnet: Developer-targeted, supply-chain attacks all the rage these days
theregister.com/cyber-crime/2026/05/27/crowdstrike-google-shatter-glassworm-botnet/5247337
npm supply chain: valid certificates, stolen accounts: Stolen credentials produced valid Sigstore certificates, clearing 633 malicious npm packages — one of ...
venturebeat.com/security/npm-sigstore-provenance-stolen-identity-audit-grid-2026
Hackers breach GitHub and access 3,800 internal repositories now listed for sale: GitHub has said it found about 3,800 internal repositories accessed in the ...
techspot.com/news/112498-hackers-breach-github-malicious-vs-code-extension-access.html
GitHub links repo breach to TanStack npm supply-chain attack: GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious ...
bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/
Hackers Infiltrate GitHub by Compromising Employee Device: GitHub traced the breach to a malicious version of a Visual Studio Code extension ...
uk.pcmag.com/security/165082/hackers-infiltrate-github-by-compromising-employee-device
Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps
venturebeat.com/security/shai-hulud-worm-172-npm-pypi-packages-valid-provenance-ci-cd-audit
github.com Apr 11
GitHub - apajon/mempalace-mcp-bridge: Contribute to apajon/mempalace-mcp-bridge development by creating an account on GitHub.
github.com/apajon/mempalace-mcp-bridge
GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...
bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/
Dozens of GitHub repositories affected: Invisible malware Glassworm is back: Last year, the invisible malware Glassworm wreaked havoc on multiple occasions ...
t3n.de/news/github-schadsoftware-glassworm-1734075/
Nasty GlassWorm Malware Pivots From Windows To Target Mac Users: The GlassWorm malware is an ever evolving threat, which is now targeting macOS in addition to ...
hothardware.com/news/glassworm-malware-pivots-windows-to-mac
Malicious VSCode extensions on Microsoft's registry drop infostealers: Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect ...
bleepingcomputer.com/news/security/malicious-vscode-extensions-on-microsofts-registry-drop-infostealers/
Next