Threat Intelligence / Actor / GlassWorm Operators (Unattributed)

GlassWorm Operators (Unattributed)

Nation: N/A · 1 tracked threat(s) · Categories: MALWARE

Also known as: GlassWorm, GlassWorm v2, OpenVSX Sleeper Crew

Tracked threats

GlassWorm v2 — 73 Open VSX Sleeper Extensions Activate Supply Chain Malware Against VS Code, Cursor, Windsurf and VSCodium Developers — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence