GlassWorm Worm Resurfaces: Invisible Unicode Malware Re-Infects VS Code Extensions, Spreads to GitHub

GlassWorm has re-emerged as a self-propagating malware campaign, infecting three new VS Code extensions and spreading to GitHub repositories. According to Koi Security, the fresh wave on OpenVSX on 6 November 2025 brought in approximately 10,000 additional infections, with downloads recorded for ai-driven-dev[.]ai-driven-dev (3,300), adhamu[.]history-in-sublime-merge (4,000) and yasuyuky[.]transient-emacs (2,400).

The worm continues to use invisible Unicode characters that disappear from editors yet execute as JavaScript when run, and it has now been observed pushing malicious commits to GitHub using stolen credentials. The attackers also rely on AI-generated commits to disguise the invisible payloads amid legitimate code changes.

The infrastructure remains resilient, with a Solana blockchain-based C2 mechanism supplementing static servers, including the primary C2 server at 199.247.10[.]166 and the exfiltration endpoint at 199.247.13[.]106:80/wall. This activity underscores the evolving risk to developers and code marketplaces alike, with the attacker’s server reportedly containing additional indicators such as a Russian-speaking operator and use of the RedExt C2 framework.