Invisible malicious code attacks 151 GitHub repos and VS Code — Glassworm attack uses blockchain to steal tokens, credentials, and secrets
by from Latest from Tom's Hardware on (#7481D)
The technique exploits Unicode Private Use Area characters, which render as zero-width whitespace in virtually every code editor and terminal.