Dozens of updated, malicious GlassWorm extensions have infested Open VSX, threatening software development supply chains.