GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.
Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.