GlassWorm loaders found hiding in popular VS Code colour themes
Socket says four theme extensions on the VS Code Marketplace and Open VSX are tied to the GlassWorm campaign, two of them confirmed malicious and using a Solana blockchain dead drop for command and control.