MAL-2025-191165

    Dashboard / Malicious Package / MAL-2025-191165

    MAL-2025-191165

    Published: 19 Nov 2025Last Modified: 26 Nov 2025

    Summary: Malicious code in kleinesfilmroellchen.serenity-dsl-syntaxhighlight (VSCode:https://open-vsx.org)

    Details: Source: google-open-source-security (4cd24ae9caaea029653d9b9516f034a9ff19684891421dd3558c584f02076c8f) This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency wallets. The extension also provides remote access and attempts to propagate itself.

    References: https://www.koi.ai/blog/glassworm-first-self-propagating-worm-using-invisible-code-hits-openvsx-marketplace

    Affected packages

    Package

    Name: kleinesfilmroellchen.serenity-dsl-syntaxhighlight

    Purl:

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    0.3.2
    MAL-2025-191165 | CVE-DB