GCVE-110-OSM-2026-13082

Aurora Borealis Studio Theme is a VS Code theme (also published to Open VSX) containing executable JavaScript unnecessary for a color theme, cluster-linked to the GlassWorm campaign. Its first two commits were authored by lohsebhipolg2s@outlook.com, the same account that publishes this extension, and its development is tied via shared git identities to Coca-Cola Christmas and Aurora Nocturne Night Theme. Malicious payload found in: extension JavaScript (no active payload triggered in analyzed version) Behavior: Contains executable JS scaffolding beyond what a static color theme requires. Git identities connect this project to Coca-Cola Christmas and the broader cluster, with recurring Russian-language source markers shared across the extensions.