NEWSGlassWorm campaign abuses Open VSX extension dependencies in supply-chain attacksMar 14, 2026 · 1 min read