Product
WakaTime
- First Reported
- Apr 10, 2026
- Latest Reported
- Apr 17, 2026
Reported Context (2)
- A new GlassWorm variant uses a Zig-compiled native dropper embedded in a malicious OpenVSX extension posing as WakaTime, allowing it to bypass typical extension sandboxing and execute with full system access. Security Roundup: Satellite Cybersecurity Bill, Chrome Flaw and Teen Arrest
- Researchers have identified a new GlassWorm evolution that uses a Zig-compiled native dropper embedded in a malicious Open VSX extension impersonating WakaTime to stealthily infect multiple IDEs. GlassWorm Uses Zig Dropper to Target Multiple Developer IDEs
CVE (5)
Malware (1)
People (4)
Threat Actors (2)
MITRE ATT&CK (6)
Vendors (6)
Products (18)
Tools (2)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.