GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
The Hacker News

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...
CSO Online

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...
Hackaday

This Week In Security: Linux Flaws, Python Ownage, And A Botnet Shutdown

Qualys reports the discovery by their threat research unit of vulnerabilities in the Linux AppArmor system used by SUSE, Debian, Ubuntu, and ...
Cinema Blend

Paramount Plus Subscription: The Price, The Plans And Other Things To Know About The Streaming Service

Though it has been around for a few years, some people might not know that a Paramount+ subscription gives them access to one of the best streaming services around, one that is filled with everything ...
Slate

Harry Styles Is Back With a New Sound—and a New Subject

This new, darker, but also more rhythm-driven album by Styles—that fawnlike cross-generational charmer, that Timothée Chalamet of pop in his similarly singular popularity and slender white Zillennial ...