🚨 𝟭𝟱𝟬+ 𝗚𝗶𝘁𝗛𝘂𝗯 𝗿𝗲𝗽𝗼𝘀𝗶𝘁𝗼𝗿𝗶𝗲𝘀 𝗰𝗼𝗺𝗽𝗿𝗼𝗺𝗶𝘀𝗲𝗱 𝗯𝘆 𝗚𝗹𝗮𝘀𝘀𝗪𝗼𝗿𝗺 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 [LIVE] A new wave of the invisible Unicode supply chain attack has hit GitHub, the same technique we first detected in malicious npm packages in March 2025, later named GlassWorm. The attack hides malware inside Unicode characters that render as nothing, meaning the payload looks like an empty string during code review. Example of the decoder pattern we’re seeing injected: 𝘤𝘰𝘯𝘴𝘵 𝘴 = 𝘷 => [...𝘷].𝘮𝘢𝘱(𝘸 => ( 𝘸 = 𝘸.𝘤𝘰𝘥𝘦𝘗𝘰𝘪𝘯𝘵𝘈𝘵(0), 𝘸 >= 0𝘹𝘍𝘌00 && 𝘸 <= 0𝘹𝘍𝘌0𝘍 ? 𝘸 - 0𝘹𝘍𝘌00 : 𝘸 >= 0𝘹𝘌0100 && 𝘸 <= 0𝘹𝘌01𝘌𝘍 ? 𝘸 - 0𝘹𝘌0100 + 16 : 𝘯𝘶𝘭𝘭 )).𝘧𝘪𝘭𝘵𝘦𝘳(𝘯 => 𝘯 !== 𝘯𝘶𝘭𝘭); 𝘦𝘷𝘢𝘭(𝘉𝘶𝘧𝘧𝘦𝘳.𝘧𝘳𝘰𝘮(𝘴(``)).𝘵𝘰𝘚𝘵𝘳𝘪𝘯𝘨('𝘶𝘵𝘧-8')); That backtick string 𝘧𝘳𝘰𝘮(𝘴(``) looks empty, but actually contains 9,000 invisible characters that decode into the real malicious payload at runtime. Some notable compromised repositories include: ⭐ pedronauck/reworm — 1,460 stars ⭐ pedronauck/spacefold — 62 stars ⭐ anomalyco/opencode-bench — 56 stars ⭐ doczjs/docz-plugin-css — 39 stars ⭐ uknfire/theGreatFilter — 38 stars We’re also seeing the same technique appear in npm packages and a VS Code extension, showing a coordinated push across ecosystems. Full write-up below 👇 (coming)