2026-03-14 23 articles
Glassworm Returns: Invisible Unicode Malware Hits 150+ GitHub Repos

Glassworm Returns: Invisible Unicode Malware Hits 150+ GitHub Repos

A threat actor named Glassworm has compromised over 150 GitHub repositories, npm packages, and VS Code extensions by hiding malicious payloads in invisible Unicode characters — and researchers believe LLMs are being used to craft convincing cover commits.

2026-03-13 27 articles