73 Open VSX Sleeper Extensions Linked to Malware Show New Activations

Reported 27 Apr 2026 by otx · Severity: medium

The GlassWorm campaign targeting Open VSX has escalated with 73 newly identified impersonation extensions. These sleeper extensions were initially published without malicious payloads by newly created GitHub accounts, appearing benign to build trust and credibility. At least six