Invisible malicious code attacks 151 GitHub repos and VS Code — Glassworm attack uses blockchain to steal tokens, credentials, and secrets

4 weeks ago

The technique exploits Unicode Private Use Area characters, which render as zero-width whitespace in virtually every code editor and terminal.