LOWData BreachACTIVE
The Hacker News: Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware
April 27, 2026
Incident Summary
Researchers identified 73 suspected malicious Visual Studio Code extensions hosted on the Open VSX repository and linked them to the GlassWorm v2 information-stealing campaign. The incident could affect developers who installed the extensions, as they may have been exposed to credential or data theft. The issue matters because compromised developer environments can lead to further downstream access or code exposure. Limited public details are available in the provided signal about whether the extensions were removed or how many users were impacted.
Incident Details
- Type
- Data Breach
- Severity
- LOW
- Status
- ACTIVE
- Date Occurred
- April 27, 2026
#hackernews#security#breach