Visual Studio Code extension malware operation hiding payloads in dependency folders
Malware Activity
Summary
Hide ▲
Show ▼
The discovery of 19 malicious Visual Studio Code extensions now shows attackers hiding malware inside trusted developer tools, increasing the risk of covert code execution for anyone installing the affected extensions. The operation was active since February 2025 and was identified on December 2, 2025. Attackers used a modified path-is-absolute npm package and a disguised banner.png archive to conceal payloads. The malware was launched through cmstp.exe, underscoring how trusted components can be abused to evade checks.
Related Happenings
Microsoft AutoGen Studio AutoJack MCP WebSocket command execution security flaw
Vulnerability
H score33
First: 22.06.2026 20:28
Last: 22.06.2026 20:28
Sources 1
About this happening:
Microsoft’s AutoJack chain exposed AutoGen Studio to arbitrary command execution for developers building from the main GitHub branch before the hardening commit.
Microsoft AutoGen Studio AutoJack MCP WebSocket command execution security flaw
VulnerabilityAbout this happening: Microsoft’s AutoJack chain exposed AutoGen Studio to arbitrary command execution for developers building from the main GitHub branch before the hardening commit.
GlassWorm v2 cloned VS Code extension loaders
Malware Activity
H score30
First: 27.04.2026 14:23
Last: 27.04.2026 14:23
Sources 1
About this happening:
The GlassWorm v2 malware activity now uses cloned VS Code extensions on Open VSX to deliver payloads that steal credentials, deploy a RAT, and spread across multip...
GlassWorm v2 cloned VS Code extension loaders
Malware ActivityAbout this happening: The GlassWorm v2 malware activity now uses cloned VS Code extensions on Open VSX to deliver payloads that steal credentials, deploy a RAT, and spread across multip...
Fake Claude PlugX phishing campaign
Campaign
H score34
First: 13.04.2026 12:52
Last: 13.04.2026 12:52
Sources 1
About this happening:
A February phishing campaign used a fake Claude website and fake meeting invitations to deliver PlugX malware to recipients, turning a popular AI brand into a malw...
Fake Claude PlugX phishing campaign
CampaignAbout this happening: A February phishing campaign used a fake Claude website and fake meeting invitations to deliver PlugX malware to recipients, turning a popular AI brand into a malw...
Latest development: 07.05.2026 13:02
A fake Claude AI site at claude-pro[.]com distributed Claude-Pro-windows-x64.zip, which drops NOVupdate.exe, NOVupdate.exe.dat, and avk.dll to sideload DonutLoader and load the Beagle backdoor on Windows. The backdoor uses license[.]claude-pro[.]com for command-and-control over TCP 443 and/or UDP 8080, and related Beagle samples were submitted to VirusTotal between February and April this year.
GlassWorm Zig dropper infecting developer IDEs
Malware Activity
H score29
First: 10.04.2026 16:23
Last: 10.04.2026 16:23
Sources 1
About this happening:
The GlassWorm malware set now uses a Zig dropper that can silently infect all VS Code-based IDEs on a developer's machine, widening the reach of the compromise. The pa...
GlassWorm Zig dropper infecting developer IDEs
Malware ActivityAbout this happening: The GlassWorm malware set now uses a Zig dropper that can silently infect all VS Code-based IDEs on a developer's machine, widening the reach of the compromise. The pa...
Plain-crypto-js remote-access Trojan delivery
Malware Activity
H score30
First: 31.03.2026 23:55
Last: 31.03.2026 23:55
Sources 1
About this happening:
The malicious plain-crypto-js dependency delivered a remote-access Trojan (RAT) that can run on Windows, Linux, and Mac, extending the open-source supply-chain comprom...
Plain-crypto-js remote-access Trojan delivery
Malware ActivityAbout this happening: The malicious plain-crypto-js dependency delivered a remote-access Trojan (RAT) that can run on Windows, Linux, and Mac, extending the open-source supply-chain comprom...
Latest development: 04.04.2026 23:30
Google Threat Intelligence Group linked the Axios npm compromise to UNC1069, a financially motivated North Korea-nexus threat actor, based on the use of WAVESHAPER.V2 and overlaps with infrastructure artifacts used by UNC1069 in past activity. The Axios maintainers also wiped affected systems, reset all credentials, and are implementing changes to prevent similar incidents.
Timeline
-
11.12.2025 18:00 2 articles · 7mo ago
ReversingLabs identifies 19 malicious VS Code extensions
Initial DisclosureReversingLabs identified a campaign affecting 19 Visual Studio Code extensions that hid malware in dependency folders and targeted developers through the VS Code Marketplace, using a modified path-is-absolute npm package, a fake banner.png archive, and cmstp.exe to launch a dropper; the activity had been active since February 2025 and the extensions were reported to Microsoft.
Show sources
- Malware Discovered in 19 Visual Studio Code Extensions — www.infosecurity-magazine.com — 11.12.2025 18:00
- Malware Discovered in 19 Visual Studio Code Extensions — www.infosecurity-magazine.com — 11.12.2025 18:00