GlassWorm spread via 14 VS Code extensions; Solana + Google Calendar C2; stole credentials, drained 49 wallets.
if this is first Code instance, from parent process. if this is not first Code instance, from already running Code instance. In my case this nondeterministic behavior breaks build in 2nd instance.
Expected results: Copilot doesn't ask me to install an unecessary extension ("GitHub Copilot for Azure") and runs the query. Actual results: Copilot asks me to install an unecessary extension ("GitHub ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results