Worm
GlassWorm
According to Koi Security, this malware harvests NPM, GitHub, and Git credentials for supply chain propagation.
GlassWorm is a JavaScript worm.
Background
Koi Security reports that this worm steals NPM, GitHub, and Git credentials to enable supply-chain propagation, and goes after 49 distinct cryptocurrency wallet extensions in order to siphon off funds. The harvested credentials are then reused to poison further packages and extensions, allowing the worm to keep spreading. It also stands up SOCKS proxy servers that convert developer machines into criminal infrastructure and plants hidden VNC servers to grant full remote control.
Source: Malpedia (Fraunhofer FKIE).