--- title: GlassWASM malware hits Open VSX, Chrome 150 kills uBlock... description: A developer news roundup covering four major stories: Socket's threat research team discovered GlassWASM, a WebAssembly-based malware campaign targeting VS... canonical: https://daily.dev/posts/glasswasm-malware-hits-open-vsx-chrome-150-kills-ublock-origin-qa7efukpq twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GlassWASM malware hits Open VSX, Chrome 150 kills uBlock Origin | daily.dev og:description: A developer news roundup covering four major stories: Socket's threat research team discovered GlassWASM, a WebAssembly-based malware campaign targeting VS... og:url: https://daily.dev/posts/glasswasm-malware-hits-open-vsx-chrome-150-kills-ublock-origin-qa7efukpq og:image: https://api.daily.dev/og/posts/qa7eFuKPq.png og:image:alt: GlassWASM malware hits Open VSX, Chrome 150 kills uBlock Origin og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GlassWASM malware hits Open VSX, Chrome 150 kills uBlock Origin **[Web Digest](https://daily.dev/sources/webdev_digest)** · 4 min read · 0 upvotes · 0 comments ## Summary A developer news roundup covering four major stories: Socket's threat research team discovered GlassWASM, a WebAssembly-based malware campaign targeting VS Code fork users via trojanized Open VSX extensions that uses the Solana blockchain as a C2 dead-drop. Chrome 150 (shipping June 30) permanently disables Manifest V2 extensions including uBlock Origin, with no full MV3 equivalent possible. React Native 0.86 delivers Android 15 edge-to-edge fixes with no breaking changes. Firefox 152 ships JPEG-XL support by default and a redesigned settings UI. Notable items include Atlassian's MCP vs DESIGN.md comparison, a React Compiler brownfield migration retrospective, Safari 27's customizable select, and a European rail site INP performance study. ## Content **TLDR:** Socket's threat research team found a WebAssembly-based malware campaign targeting VS Code fork users through trojanized Open VSX extensions — the C2 uses the Solana blockchain as a dead-drop, making it unusually hard to take down. Chrome 150 ships June 30 and permanently disables Manifest V2 extensions including uBlock Origin, with no full MV3 equivalent possible. React Native 0.86 lands with solid Android 15 edge-to-edge fixes and no breaking changes. Firefox 152 ships JPEG-XL support and a redesigned settings UI. --- ## GlassWASM: WebAssembly malware found in trojanized Open VSX extensions Socket's threat research team uncovered a campaign called GlassWASM targeting users of VS Code forks via two fake extensions on the Open VSX marketplace — a theme clone and a blockchain debugger clone. The payload is a TinyGo-compiled WASM module that uses ChaCha20 encryption and reads attacker instructions from SPL Memo fields on Solana blockchain transactions, meaning there's no server to seize and the operator can rotate infrastructure by posting new memos. Once the C2 host resolves, it runs fileless download-and-execute commands via Node's child_process — curl | bash on Unix, irm | iex on Windows. If you use a VS Code fork and install extensions from Open VSX, treat .wasm files in packages as high-risk and rotate credentials on any affected machine. [Read more](https://app.daily.dev/posts/kjdlX357b) ## Chrome 150 permanently disables uBlock Origin on June 30 Chrome 150 removes the last flag keeping Manifest V2 extensions alive, which means uBlock Origin and every other content blocker relying on the webRequest API gets disabled permanently. The replacement declarativeNetRequest API uses static, predefined rule sets with a hard cap on filtering rules — uBlock Origin's developer has said a full MV3 equivalent isn't possible. Firefox and Brave continue to support full-capability content blocking. If you rely on uBlock Origin in Chrome, you have until June 30 to switch browsers or accept the reduced-functionality uBlock Origin Lite. [Read more](https://app.daily.dev/posts/FsalMwAEG) ## React Native 0.86 ships edge-to-edge fixes for Android 15 with no breaking changes React Native 0.86 fixes the Android 15 edge-to-edge issues that have been tripping up teams: correct coordinates from measureInWindow, KeyboardAvoidingView compatibility, and StatusBar improvements all land here. DevTools gains light/dark mode emulation via the Command Palette. The release includes 596 commits from 97 contributors and has no user-facing breaking changes, so upgrading from 0.85 should be straightforward. The React Native repo has also moved to the react GitHub organization under the React Foundation. [Read more](https://app.daily.dev/posts/PrfpRVMPQ) ## Firefox 152 ships JPEG-XL by default and a redesigned settings UI Firefox 152 is out with JPEG-XL support compiled into beta and release builds by default — previously it was Nightly-only, though users still need to enable it via Firefox Labs. The release also includes a redesigned settings UI, HDR video support on Windows, and the CSS field-sizing property. Vulkan Video decoding is expected in Firefox 153 next month. [Read more](https://app.daily.dev/posts/TW3gwuNtt) --- ## Also notable - **Atlassian tested DESIGN.md vs MCP and MCP won by a wide margin:** Atlassian's design system team found that DESIGN.md consumed ~92% more tokens, had 2.7x higher token variance, and delivered only ~30% of design system context compared to ~80% via MCP — useful for quick prototyping and cross-platform portability, but not a replacement for MCP-based tooling in production. [Read more](https://app.daily.dev/posts/nnF3QTA24) - **React Compiler at 18 months: brownfield migration is still a real project:** A retrospective on the React Compiler covers the four main failure patterns (prop mutation, ref reads during render, class components, unsupported syntax) and notes that while greenfield adoption is straightforward, brownfield migration requires deliberate sequencing — the compiler silently skips non-compliant components rather than erroring. [Read more](https://app.daily.dev/posts/0iOzfYX39) - **Customizable select arrives in Safari 27 with one hard rule:** Safari 27 ships customizable select, enabling full visual control over native select elements without JavaScript, but the WebKit team is firm: always include real text in option elements — icons or swatches alone break screen readers, braille displays, and fallback rendering in unsupported browsers. [Read more](https://app.daily.dev/posts/OVcVNr5YR) - **European rail site performance study finds React re-renders killing INP on fast-loading sites:** A CrUX-based analysis of 25 European railway sites found that fast LCP doesn't guarantee good overall experience — nationalrail.co.uk and vr.fi both suffer poor INP scores traced to unnecessary React re-renders and long tasks, while Denmark's dsb.dk leads with LCP under 1 second. [Read more](https://app.daily.dev/posts/25IXYeMTW) - **Auth0 native Vercel integration provisions tenant and syncs credentials in under five minutes:** Auth0's new Vercel Marketplace integration automatically provisions a tenant, creates the client app, and syncs credentials across Development, Preview, and Production environments with bidirectional sync — no manual copying of client IDs, secrets, or callback URLs. [Read more](https://app.daily.dev/feed-by-ids?id=Hzx9Z0znF&id=Wz8d6sRRl) --- Tags: [#security](https://daily.dev/tags/security), [#react-native](https://daily.dev/tags/react-native), [#google-chrome](https://daily.dev/tags/google-chrome), [#webassembly](https://daily.dev/tags/webassembly), [#firefox](https://daily.dev/tags/firefox) [View this post on daily.dev](https://daily.dev/posts/glasswasm-malware-hits-open-vsx-chrome-150-kills-ublock-origin-qa7efukpq) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/glasswasm-malware-hits-open-vsx-chrome-150-kills-ublock-origin-qa7efukpq","headline":"GlassWASM malware hits Open VSX, Chrome 150 kills uBlock Origin","text":"A developer news roundup covering four major stories: Socket's threat research team discovered GlassWASM, a WebAssembly-based malware campaign targeting VS Code fork users via trojanized Open VSX extensions that uses the Solana blockchain as a C2 dead-drop. Chrome 150 (shipping June 30) permanently disables Manifest V2 extensions including uBlock Origin, with no full MV3 equivalent possible. React Native 0.86 delivers Android 15 edge-to-edge fixes with no breaking changes. Firefox 152 ships JPEG-XL support by default and a redesigned settings UI. Notable items include Atlassian's MCP vs DESIGN.md comparison, a React Compiler brownfield migration retrospective, Safari 27's customizable select, and a European rail site INP performance study.","url":"https://daily.dev/posts/glasswasm-malware-hits-open-vsx-chrome-150-kills-ublock-origin-qa7efukpq","datePublished":"2026-06-16T04:18:35.680Z","dateModified":"2026-06-16T04:19:58.156Z","author":{"@type":"Organization","name":"Web Digest","logo":"https://media.daily.dev/image/upload/s--C833eNQW--/f_auto,q_auto/v1773839396/logos/webdev_digest?_a=BAMAMiiu0","url":"https://daily.dev/sources/webdev_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/webdev_digest","name":"Web Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Web Digest","item":"https://daily.dev/sources/webdev_digest"},{"@type":"ListItem","position":3,"name":"GlassWASM malware hits Open VSX, Chrome 150 kills uBlock Origin"}]} ```