The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research.
How can an extension change hands with no oversight?