2026-03-16 16 articles
2026-03-15 19 articles
2026-03-14 15 articles
Glassworm Returns: Invisible Unicode Malware Hits 150+ GitHub Repos

Glassworm Returns: Invisible Unicode Malware Hits 150+ GitHub Repos

A threat actor named Glassworm has compromised over 150 GitHub repositories, npm packages, and VS Code extensions by hiding malicious payloads in invisible Unicode characters — and researchers believe LLMs are being used to craft convincing cover commits.