Articles by

Daniel Miranda

I’m a Security Research Intern focused on software supply-chain security. I completed an M.Sc. in Informatics Engineering at Universidade do Minho, specializing in Cryptography and Computer Systems Security, and Formal Methods in Programming.

Digital illustration of a glass worm, indicative of the GlassWorm malware campaign, coiling around computer screens showing code, data grids, and application icons. A dark, grungy cityscape is in the background. 'Checkmarx ZERO' branding is in the corner.

March 23, 2026
GlassWorm Targets Developer IDEs Again, Hiding Staged Malware Behind Runtime-Rebuilt Loaders

a developer at a workstation is tugged by puppet strings from a large ghostly hand above, while a VS Code extensions screen shows “Solidity” and a “ScreenConnect” tag, suggesting a compromised dev setup.

January 30, 2026
Solidity devs targeted again: Malicious VS Code extension drops ScreenConnect-based remote access trojan (RAT)

November 13, 2025
How we take down malicious Visual Studio Code extensions

$Widescreen graffiti-style cyberpunk illustration showing a dark, gritty wall with a glowing VS Code logo at center, surrounded by fake ‘pro’ extensions like ‘Quarto Pro,’ ‘Profiler PHP Pro,’ and ‘Catppuccin’ painted as corrupted street signs. Neon green and teal dominate the scene, with rough textures, paint splatters, and fractured lines suggesting tampering and impersonation.$

December 5, 2025
Taking Down More Malicious VSCode Extensions in the ‘Prettier’ Campaign