Security News GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers TheHackerNews Daniel Bender 14 Mar 2026 GlassWorm campaign used 72 malicious Open VSX extensions and infected 151 GitHub repositories, enabling stealth supply-chain attacks on developers.