Aikido Security Blog company blog

Glassworm is back: A new wave of invisible Unicode attacks hits repositories

The Glassworm supply chain attack is back. Researchers uncovered malware hidden in invisible Unicode characters across 150+ GitHub repositories, plus npm packages and VS Code extensions.
Points
303
HN comments
193
Submissions
1
Cited by
0 commenters

Security & PrivacyWeb & Frontend2026

On Hacker News

SubmittedTitle on HNPointsComments
Mar 15, 2026Glassworm is back: A new wave of invisible Unicode attacks hits repositories by robinhouston303193

More from Aikido Security Blog

All 4 posts →

Related posts from the same era