GlassWorm Campaign Injects Malware into Hundreds of Python Repositories

GlassWorm malware campaign leverages stolen GitHub tokens to inject malicious code into Python repositories including Django apps, ML research code, and PyPI packages. New iteration abuses 72 Open VSX extensions to target developers. This incident highlights the evolving threat landscape and the sophisticated tactics employed by modern threat actors. Organizations should review their security posture, ensure all systems are patched, implement defense-in-depth strategies, and monitor for indicators of compromise. Source: The Hacker News / SecurityWeek