Supply-chain attack using invisible code hits GitHub and other repositories

Biz & IT - Ars Technica3/13/2026tech

Unicode that's invisible to the human eye was largely abandoned—until attackers took notice.