GlassWorm supply chain attack hits Open VSX via a compromised publisher account. ClawHavoc floods the OpenClaw marketplace with 341 malicious skills. Mustang Panda (HoneyMyte, Bronze President) expands its CoolClient backdoor across Asia. Anatsa banking trojan found on Google Play.