Hub/AI Security/Advisories/glassworm-wave5-2026

GlassWorm wave 5: malicious MCP server on npm and 72+ fake OpenVSX extensions

Palo Alto Networks reports a malicious MCP server package (flagged Mar 12) and 72+ malicious OpenVSX extensions, some impersonating Claude Code and Codex.

Published	Mar 16, 2026
Severity	Not Rated
CVE	None assigned
Status	research
Affected	Not listed
Fixed in	Not listed
Component	npm @iflow-mcp/watercrawl-watercrawl-mcp 1.3.0–1.3.4; OpenVSX

Sources

https://www.paloaltonetworks.com/blog/security-operations/glassworm-wave-5-malicious-mcp-servers/

Checked 2026-11-04. We copy severity and fix versions from the source and never estimate them.

Affected tools

MCP protocol, SDKs and registry Security posture matrix

Weekly, free

What changed in AI integrations

One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.