GlassWorm Supply Chain Attacks Through Compromised Developer and Package Publisher Accounts

GlassWorm is driving active software supply chain compromises by abusing stolen credentials to insert malware into widely used open-source code and package ecosystems. One campaign, dubbed ForceMemo, used GitHub tokens stolen from developer machines via malicious VS Code and Cursor extensions to force-push obfuscated payloads into hundreds of Python repositories, including Django apps, ML projects, Streamlit dashboards, and PyPI-linked codebases. The injected code was appended to files such as setup.py, main.py, and app.py, preserved original commit metadata to reduce suspicion, skipped execution on systems using a Russian locale, and retrieved follow-on payload locations through the memo field of a Solana wallet previously associated with GlassWorm.

A separate but related supply chain intrusion hit npm on March 16, when two React Native packages from the same publisher — react-native-country-select@0.3.91 and react-native-international-phone-number@0.11.8 — were backdoored with identical preinstall malware. Installing either package triggered a multi-stage Windows-focused credential and cryptocurrency stealer capable of persistence and additional payload delivery, exposing developers, CI runners, and build agents to compromise through routine dependency installation. A third report on malicious npm packages posing as a Roblox Solara executor describes a different campaign, Cipher stealer, targeting Discord, browsers, and crypto wallets, and does not appear tied to GlassWorm or the compromised React Native packages.