Supply-chain attack using invisible code hits GitHub and other repositories

Unicode that’s invisible to the human eye was largely abandoned”, until attackers took notice.

First seen on arstechnica.com

Jump to article: arstechnica.com/security/2026/03/supply-chain-attack-using-invisible-code-hits-github-and-other-repositories/