#aitool

CySecurity News

@cysecuritynews.bsky.social

5 hours ago

GlassWorm Abuses 72 Open VSX Extensions in Bold Supply-Chain Assault  GlassWorm has resurfaced with a more aggressive supply‑chain campaign, this time weaponizing the Open VSX registry at scale to target developers. Security researchers say the latest wave represents a significant escalation in both scope and stealth compared to earlier activity.  Since January 31, 2026, at least 72 new malicious Open VSX extensions have been identified, all masquerading as popular tools like linters, formatters, code runners, and AI‑powered coding assistants. These look and behave like legitimate utilities at first glance, making it easy for busy developers to trust and install them. Behind the scenes, however, they embed hidden logic designed to pull in additional malware once inside a development environment. The attackers now abuse trusted Open VSX features such as extensionPack and extensionDependencies to spread their payloads transitively. An extension can appear harmless on installation but later pull in a malicious dependency via an update or a bundled pack. This approach allows the threat actor to minimize obviously suspicious code in each listing while still maintaining a broad infection path. Once executed, GlassWorm behaves as a multi‑stage infostealer and remote access tool targeting developer systems. It focuses on harvesting credentials for npm, GitHub, Git, and other services, then uses those stolen tokens to compromise additional repositories and publish more infected extensions. This creates a self‑reinforcing loop that can quickly expand across ecosystems if not promptly contained.  Beyond credentials, GlassWorm aggressively targets financial data by going after more than 49 different cryptocurrency wallet browser extensions, including popular wallets like MetaMask, Coinbase, and Phantom. Stolen cookies and session tokens can enable account takeover, while drained wallets provide immediate monetization for the attackers. In later stages, the malware deploys a hidden VNC component and SOCKS proxy, effectively converting developer machines into nodes within a criminal infrastructure.  For developers and organizations, this campaign underscores how extension ecosystems have become high‑value attack surfaces. Teams should enforce strict extension allowlists, monitor unusual repository activity, and rotate credentials if any suspicious Open VSX extensions were recently installed. Security tooling that inspects extension metadata, dependency chains, and post‑install behavior is now essential to counter evolving threats like GlassWorm.

GlassWorm Abuses 72 Open VSX Extensions in Bold Supply-Chain Assault #AITool #GlassWorm #malware

@zplatform.bsky.social

1 day ago

Smart Spreadsheets Lifetime Deal - Unlock enterprise-level automation without leaving your Google Sheets

zplatform.ai/deals/smart-...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

1 day ago

Airbrush Lifetime Deal - Use AI to create high-quality images and artwork in seconds

zplatform.ai/deals/airbru...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

1 day ago

Spokk Lifetime Deal - Get customer feedback and 5-star reviews in under 15 seconds

zplatform.ai/deals/spokk/

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

1 day ago

MetaSurvey Lifetime Deal - Create card-style survey, quiz, and form 's perfect for feedback and lead generation. AI-powered!

zplatform.ai/deals/metasu...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

2 days ago

SheetMagic Lifetime Deal - Use ChatGPT in Google Sheets, create bulk AI content, & automate your AI work. (formerly SheetGPT)

zplatform.ai/deals/sheetg...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

2 days ago

NodeLand Lifetime Deal - Note-taking as it should be; keep every idea in one place and connect everything you write with AI

zplatform.ai/deals/cmaps/

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

2 days ago

NativeRest Lifetime Deal - Create, debug and test your API with a fast and lightweight API-client for Windows, macOS and Linux

zplatform.ai/deals/native...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

2 days ago

Labrika Lifetime Deal - Boost your website's s SEO with AI-driven insights and actionable recommendations

zplatform.ai/deals/labrika/

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

3 days ago

Picbolt Lifetime Deal - Transform your ordinary screenshots into eye-catching visuals in seconds

zplatform.ai/deals/picbolt/

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

3 days ago

FlowyTeam Lifetime Deal - It's an all-in-one for SMEs: Strategy, OKR, KPI, Tasks, Projects, CRM, Finance, HRMS, AI, and more.

zplatform.ai/deals/market...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

3 days ago

ApproveThis Lifetime Deal - Stop chasing approvals. Start collaborating with anyone, instantly.

zplatform.ai/deals/approv...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

3 days ago

Vibeo Lifetime Deal - Turn user-generated content into high-converting videos for your brand

zplatform.ai/deals/vibeo/

#LifetimeDeal #AITool #AIDeals

Josué HOMESPUN

@iamhomespun.bsky.social

3 days ago

You can swap in Main languages and know litteraly in 2 clicks what the deal is about and if it matches with you
#buildwithai #hmedia #aitool #decisionmaking

Josué HOMESPUN

@iamhomespun.bsky.social

3 days ago

To make investors décidé faster accordingly to who they are and they want to invest in. I built Noise Canceling Assistant . A cool tool which will be available only in my Investors club H CAPITAL.

#buildwithai #hmedia #aitool #decisionmaking

@zplatform.bsky.social

4 days ago

Trebble Lifetime Deal - The audio & video editor for non-editors

zplatform.ai/deals/trebbl...

#LifetimeDeal #AITool #AIDeals

Josué HOMESPUN

@iamhomespun.bsky.social

4 days ago

I ve built this app with @manusaihq.bsky.social ( in 20 minutes).
It is a simulator to make easy to understand whoever wants to invest in my startup
#hmedia #aitool #aiapp #buildwithai #startup

@zplatform.bsky.social

4 days ago

Mystrika Lifetime Deal - Maximize your sales potential with Mystrika -- more replies, more revenue, less effort

zplatform.ai/deals/mystrika/

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

4 days ago

Vocal Lifetime Deal - Record and Send Voice Notes via Email. AI, transcription, CNAME, tracking, mobile support & more!

zplatform.ai/deals/market...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

4 days ago

Stackby Lifetime Deal - Use your spreadsheets to build custom databases and powerful automations

zplatform.ai/deals/stackby/

#LifetimeDeal #AITool #AIDeals

Akhlak Pranto | Works at Fiverr, Upwork | Affiliate Marketer

@akhlakpranto.bsky.social

5 days ago

Generate 100 Content Ideas In 30 Seconds

#socialmedia #sallandık #ContentStrategy #smm #hirehumanemployees #BusinessAutomation #aitool #growthhacks #HBLPSL11 #WomensDayWithGSSY #SmallWins #RobloxBear #GiveawayAlert #onlinecourse #socialmediatips #socialmediapost #marketingcontent

@zplatform.bsky.social

5 days ago

Writeseed Lifetime Deal - The most complete AI writer on the market with 70+ templates, a Chrome extension & unlimited usage

zplatform.ai/deals/writes...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

5 days ago

RTILA Lifetime Deal - Create Powerful Web Automations & Compile them into your own Software & Monetize them like a Pro !

zplatform.ai/deals/market...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

5 days ago

Writecream Lifetime Deal - Your secret weapon for SEO, research & marketing

zplatform.ai/deals/market...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

5 days ago

MetaSurvey Lifetime Deal - Create card-style survey, quiz, and form 's perfect for feedback and lead generation. AI-powered!

zplatform.ai/deals/metasu...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

6 days ago

CutMe Short Lifetime Deal - Empower your URLs before sharing, get powerful analytics, predict clicks, and much more

zplatform.ai/deals/cutme-...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

6 days ago

Support Board Lifetime Deal - Live Chat and Chatbot by OpenAI. Support for TidyCal, WhatsApp, Instagram, Google, Email, Ticket ...

zplatform.ai/deals/suppor...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

6 days ago

Pin Generator Annual Deal - The FASTEST Pinterest marketing solution. Generate and Automate content quickly.

zplatform.ai/deals/pin-ge...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

6 days ago

IdeaBuddy Lifetime Deal - Bring your business ideas to life with our all-in-one business planning software, powered by AI

zplatform.ai/deals/market...

#LifetimeDeal #AITool #AIDeals

@zplatform.bsky.social

1 week ago

RenderCut Lifetime Deal - Add stylish subtitles to your videos effortlessly and save hours of manual editing

zplatform.ai/deals/render...

#LifetimeDeal #AITool #AIDeals