New GlassWorm Using Invisible Code Hits Attacking VS Code Extensions on OpenVSX Marketplace
In October 2025, a significant cybersecurity threat emerged with the detection of GlassWorm, a self-propagating malware campaign affecting VS Code extensions on the OpenVSX Marketplace. This development underscores the growing challenges in securing…
In October 2025, a significant cybersecurity threat emerged with the detection of GlassWorm, a self-propagating malware campaign affecting VS Code extensions on the OpenVSX Marketplace. This development underscores the growing challenges in securing supply chain systems within developer ecosystems.
Reports indicate that over 35,800 installations have been compromised, with ongoing risks due to active malicious extensions. The attack's impact includes credential theft and deeper infiltration into developer systems.
The campaign was initially identified by Koi researchers who noted unusual behavior in the "CodeJoy" extension following its 1.8.3 update. Although the extension initially passed visual code reviews, Koi’s risk engine detected anomalous network connections and credential access.
The infection mechanism was novel, utilizing invisible Unicode characters to embed malicious code within otherwise legitimate JavaScript source files. This allowed the malware to evade detection by most static analysis tools.
This development underscores the growing challenges in securing supply chain systems within developer ecosystems.
The worm is designed to harvest secrets from npm, GitHub, and OpenVSX, as well as target multiple cryptocurrency wallet extensions. It uses the stolen credentials to further propagate, ultimately creating a self-sustaining cycle. Compromised devices can then be used as proxy nodes or platforms for remote attacks.
Analysts have confirmed that the attackers have established a resilient command-and-control infrastructure using the Solana blockchain. The use of blockchain for payload distribution, along with additional C2 mechanisms such as Google Calendar events and direct IP endpoints, complicates mitigation efforts.
A distinctive feature of the GlassWorm operation is its use of Unicode "variation selector" exploits. These non-rendering characters allow malicious code to remain hidden from visual editors and code review platforms while being executed by JavaScript interpreters.
To address this threat, it is crucial for development teams to update their code inspection and continuous integration processes to detect non-standard Unicode characters. Specialized tools capable of byte-wise analysis are recommended to uncover hidden payloads.
Based on reporting by Cyber Security News.