2026-03-16 6 articles
2026-03-15 19 articles
2026-03-14 25 articles
Glassworm Returns: Invisible Unicode Malware Hits 150+ GitHub Repos

Glassworm Returns: Invisible Unicode Malware Hits 150+ GitHub Repos

A threat actor named Glassworm has compromised over 150 GitHub repositories, npm packages, and VS Code extensions by hiding malicious payloads in invisible Unicode characters — and researchers believe LLMs are being used to craft convincing cover commits.