A new attack dubbed 'Glassworm' uses invisible Unicode characters to compromise GitHub repositories, npm packages, and VS Code.

Source Brief

A new attack dubbed 'Glassworm' uses invisible Unicode characters to compromise GitHub repositories, npm packages, and VS Code. It's a new wave of activity from the same threat actor responsible for similar attacks last year.