Story
Glassworm Is Back: A New Wave of Invisible Unicode Attacks Hits Repositories
1 report
1 website
1 discussion
Latest report
Overview
Glassworm malware has re-emerged, compromising over 150 GitHub repositories, npm, and VS Code through the use of hidden Unicode characters. This resurgence follows previous activity traced back to the same threat actor, highlighting ongoing vulnerabilities in these platforms.
Summary from aikido.dev.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · aikido.dev
Hacker News discussion ↗
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Read this discussion’s reaction
Based on 5 sampled comments from this thread. Analyzed 2026-03-15.
- Concern: Invisible Unicode characters complicate text processing and can lead to security vulnerabilities, raising concerns about the integrity of code repositories.
- Concern: The lack of automated rules to detect zero-width characters indicates a significant oversight in repository security practices, potentially exposing users to hidden attacks.
- Concern: Relying solely on repository operators to guard against Unicode-based attacks is unrealistic; proactive measures are necessary to ensure community safety.