Socket links GlassWorm VS Code themes to malicious VS Code extensions with 8,000+ installs, including a Coca-Cola theme. See how to check yours. Related Posts: Moroccan Intelligence Deploys Vast Surveillance Panopticon DragonForce Backdoor Adds MQTT Fallback to Microsoft Teams TURN Command Channel New 2CLoader Malware Delivers Vidar and Remus Infostealers While Dodging Sandboxes The post Socket Links Popular VS Code Color Themes to the GlassWorm Supply Chain Campaign appeared first on Daily C

Security researchers found 150 lookalike Open VSX extensions published under trusted names, highlighting how extension marketplaces can expose developer credentials, source code, and CI/CD systems to supply-chain risk. The post 77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data appeared first on TechRepublic.