Over 70 clones of popular extensions published to the Open VSX marketplace in April are likely designed to deliver GlassWorm ...
This was not a case of stolen credentials, but rather of vulnerability exploitation.