Security News Open VSX Supply Chain Attack Used Compromised Dev Account to Spread GlassWorm TheHackerNews Daniel Bender 02 Feb 2026 Open VSX supply chain attack hijacked VS Code extensions delivered GlassWorm malware stealing macOS, crypto, and developer data.