GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

May 27, 2026

CrowdStrike, in partnership with Google and the Shadowserver Foundation, has announced the simultaneous disruption of all command-and-control (C2) channels associated with GlassWorm, a persistent software chain campaign targeting software developers through malicious packages and extensions.

“Since at least early 2025, GlassWorm operators have systematically targeted software developers, a

Get Free Report & Network Analysis

Please check your email for the free report.