GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
InfoWorld

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

Supply-chain attack using invisible code hits GitHub and other repositories

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible ...
GitHub

REAPER Guitar Pro Sync

REAPER Guitar Pro Sync is a plugin for REAPER that gives Guitar Pro 8 control over REAPER playback. This allows you to practice along to your REAPER projects with a Guitar Pro tab, using REAPER to ...