glassworm-hunter

glassworm-hunter 在你的机器上检测GlassWorm供应链攻击载荷。扫描VS Code扩展、npm包、Python包和git仓库。 该扫描器检测攻击技术本身 ——不可见的Unicode变体选择器载荷、GlassWorm解码器模式、C2指示器和凭据窃取代码。 安装 root@kitploit: pip install glassworm-hunter 或者使用pipx： root@kitploit: pipx install glassworm-hunter 快速开始 扫描当前目录，但不扫描VS Code/Cursor扩展： root@kitploit:...

Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack

Cybersecurity researchers have discovered a self-propagating worm that spreads via Visual Studio Code VS Code extensions on the Open VSX Registry and the Microsoft Extension Marketplace, underscoring how developers have become a prime target for attacks. The sophisticated threat, codenamed...