VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.
The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.
Converting ZIP codes to latitude and longitude coordinates unlocks location functionality that ZIP code strings alone can’t support — distance calculations, radius searches, map markers, delivery zone ...