Invisible malicious code attacks 151 GitHub repos and VS Code — Glassworm attack uses blockchain to steal tokens, credentials, and secrets
Tom's Hardware: For The Hardcore PC Enthusiast [Unofficial]
March 14, 2026
The technique exploits Unicode Private Use Area characters, which render as zero-width whitespace in virtually every code editor and terminal.
Discussion in the ATmosphere