A self-spreading malware called GlassWorm has infected OpenVSX and one VSCode extension (cline-ai-main.cline-ai-agent v3.1.3), enabling it to propagate across systems and steal data. This supply chain attack highlights vulnerabilities in extension ecosystems and raises concerns about security in AI-driven development workflows.
I kept hearing in my head "Elf spreading worm" for some reason.
I kept hearing in my head "Elf spreading worm" for some reason.
Aj Wilson
Quality Engineering Manager II / Technical Development Lead / Chief Quality Officer
She/Her
Intellectual (non practicing)| Neurospicy | UN Women Volunteer | Above all Curious & Challenging - Quality and Testing Leadership for 20+ years.
Sign in
to comment
Better than a generic video, see YOUR test, live, ready to show you what matters most: quality at scale.
Explore MoT
Mitigate security risks by building simple security testing techniques into your daily routine
Into the MoTaverse is a podcast by Ministry of Testing, hosted by Rosie Sherry, exploring the people, insights, and systems shaping quality in modern software teams.
