Get the latest tech news

Glassworm is back: A new wave of invisible Unicode attacks hits repositories


The Glassworm supply chain attack is back. Researchers uncovered malware hidden in invisible Unicode characters across 150+ GitHub repositories, plus npm packages and VS Code extensions.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of new wave

new wave

Photo of repositories

repositories

Photo of glassworm

glassworm

Related news:

News photo

Supply-chain attack using invisible code hits GitHub and other repositories

News photo

A.I. Incites a New Wave of Grieving Parents Fighting for Online Safety

News photo

MindsEye developer Build A Rocket Boy's co-CEO blames "organised espionage and corporate sabotage" again, while announcing new wave of layoffs