Researchers disclose rapid exploit chain that let attackers run code via a single malicious web page Security issues continue ...

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.