GlassWorm campaign infects developer IDEs with Zig dropper via fake extension

The GlassWorm campaign now uses a fake VS Code extension to infect multiple developer IDEs with a new Zig dropper. This malicious extension, disguised as WakaTime, installs a native binary that finds and infects other IDEs on the system, downloading and installing further malicious extensions. The campaign aims to steal data and deploy remote access trojans, with researchers urging users to rotate credentials if they installed the compromised extensions.