Digital Warfare Podcast Daily Brief May 27, 2026

The Digital Warfare Podcast · May 27, 2026 · 4m · transcript

Summary

The GlassWorm campaign is a large-scale developer-focused supply chain attack targeting npm packages, GitHub repositories, VS Code extensions, and Open VSX marketplaces. The malware behaves like a self-propagating worm, stealing developer credentials, compromising repositories, injecting malicious code into trusted packages, and spreading automatically through software supply chains. Researchers warn that developer ecosystems are increasingly becoming high-value operational attack surfaces.

Key Takeaways

• GlassWorm spreads through npm packages, GitHub repositories, VS Code…