Security News Open VSX Supply Chain Attack Used Compromised Dev Account to Spread GlassWorm TheHackerNews Daniel Bender 02 Feb 2026 Share Open VSX supply chain attack hijacked VS Code extensions delivered GlassWorm malware stealing macOS, crypto, and developer data.