GlassWorm campaign used 72 malicious Open VSX extensions and infected 151 GitHub repositories, enabling stealth supply-chain attacks on developers.
"Living Off the Land" attacks use built-in tools and processes instead of traditional malware.