ClickFix attacks fake CAPTCHA pages to trick users into running malicious commands, delivering malware through compromised websites.
GlassWorm hides malware in VS Code theme extensions, targeting developers through Visual Studio Marketplace and Open VSX.