GlassWorm Attack Hijacks Hundreds of Python Repos Through Stolen GitHub Tokens
A self-propagating malware campaign steals developer credentials via malicious VS Code extensions, then force-pushes cryptocurrency-stealing code into legitimate Python projects.