Sandbox escape vulnerability in vm2, used by nearly 900 NPM packages, allows attackers to bypass security protections and ...
A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.