Some apps launch with Windows without ever appearing in Task Manager’s startup tab.
GlassWorm campaign used 72 malicious Open VSX extensions and infected 151 GitHub repositories, enabling stealth supply-chain attacks on developers.