GlassWorm infected Visual Studio Code extensions using invisible Unicode and Solana blockchain command-and-control; OpenVSX was impacted but later contained and remediated.
GlassWorm is a worm that spreads through infected VS Code extensions using invisible Unicode characters, leverages Solana transactions for command-and-control, and deploys a remote access trojan.