Open VSX
In 12 briefs, most recently 5 August 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- Unitel cyberattack before its IPO, a tl;dv Firebase flaw exposing private meetings, and ChainDrop malware compromising 1,300+ npm packages.
- Covers the European Commission's Amazon cloud breach, the hack of FBI Director Kash Patel's email, and TeamPCP's Telnyx PyPI supply chain attack.
- AppsFlyer Web SDK supply-chain hijack stealing crypto, GlassWorm abusing 72 Open VSX extensions, and OpenClaw AI agent flaws.
- Notepad++ supply chain attack, ShinyHunters' Panera Bread leak of 5.1M records, and actively exploited SolarWinds Web Help Desk RCE added to CISA KEV.
- Supply chain attacks hit eScan antivirus updates and Open VSX Registry (GlassWorm), plus automated MongoDB data extortion campaigns.
- RondoDox botnet exploits React2Shell to hijack IoT devices; GlassWorm pushes trojanized crypto wallets to macOS developers via malicious VSCode extensions.
- GlassWorm returns with malicious VS Code extensions on OpenVSX; Microsoft discloses Whisper Leak AI side-channel attack and reminds Windows 10 users to enroll …
- Penn breach claims 1.2M donors exposed, Open VSX token leak enabling supply-chain attacks, and arrest of alleged Jabber Zeus coder MrICQ in Italy.
- The Ribbon Communications breach, Cisco IOS XE webshell attacks, the Motex Lanscope zero-day exploited by Tick, and Conti extradition news.
- Prince Group crypto seizure, Harvard breached via Oracle E-Business Suite zero-day CVE-2025-61884, and Flax Typhoon ArcGIS backdoor campaign.
- The McHire chatbot data exposure of 64M applicants, the Gravity Forms supply-chain backdoor, and Wing FTP Server and FortiWeb exploitation.
- The UNFI and Hawaiian Airlines cyberattacks, a DOJ charge against alleged IntelBroker, and critical Cisco ISE and Open VSX flaws.