Researchers at Socket disclosed that the GlassWorm malware campaign has continued seeding the Open VSX extension registry with impersonation extensions targeting AI-assisted IDEs including Cursor, Windsurf, Google Antigravity, and AWS Kiro. Of 73 tracked extensions, six had already been activated to deliver malware, with the remainder left as dormant ‘sleeper’ packages that could be weaponized via a later update. Researchers have linked more than 320 malicious artifacts to the campaign since December 2025.