MAL-2025-191169 — Vulnetix

MAL-2025-191169 PUBLISHED

Malicious code in srcery-colors.srcery-colors (VSCode:https://open-vsx.org)

Affected Products

Vendor	Product	Versions
VSCode:https://open-vsx.org	srcery-colors.srcery-colors	0, 0.3.9, 0

Timeline

Nov 19, 2025 CVE Published

References

https://www.koi.ai/blog/glassworm-first-self-propagating-worm-using-invisible-code-hits-openvsx-marketplace related

Open in Interactive Console →

$ Console Community · 100/wk Open console ›