The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research.

The researchers found that the smallest crabs were the most vulnerable, and more than twice as likely to get eaten compared to medium or large juveniles.

The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that evade standard code review.