The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms.
The Visual Studio Marketplace and the Open VSX Registry users are targeted once again with infostealing malware.