ClosedHighPatched
GlassWorm: self-spreading VS Code / OpenVSX extension worm hidden in invisible Unicode
VS Code extensions on OpenVSX and the VS Code Marketplace
Koi Security found extensions on OpenVSX (and one on Microsoft's marketplace) carrying JavaScript hidden in invisible Unicode variation selectors. The malware stole npm, GitHub, Git and OpenVSX credentials to infect more extensions, went after crypto wallets, and set up SOCKS proxies and hidden VNC.
Why this severity: Self-propagating supply-chain worm; credential and wallet theft
- Started
- Oct 17, 2025
- Closed
- Oct 31, 2025
Affected
- e.g. CodeJoy 1.8.3/1.8.4, cline-ai-agent 3.1.3 (Microsoft marketplace) and several OpenVSX extensions (see Koi list)
Fixed in
- Malicious releases removed from the marketplaces
Timeline2
News & write-ups4
- First Self-Propagating Worm Using Invisible Code Hits OpenVSX MarketplaceKoi Security · Write-up
- Self-spreading GlassWorm malware hits OpenVSX, VS Code registriesBleepingComputer
- GlassWorm - Self-Propagating VSCode Extension WormTruesec · Write-up
- Supply Chain Attack Targets VS Code Extensions With 'GlassWorm' MalwareSecurityWeek
Notes & caveats
Exact disclosure dates (Oct 17 / Oct 20) are approximate; GlassWorm resurfaced in later waves. closedAt marks the end of the first wave, not of the campaign.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
