Heads up you code maintainers who take submissions from people, delete unicode characters. See this: https://arstechnica.com/security/2026/03/supply-chain-attack-using-invisible-code-hits-github-and-other-repositories/ Yes, people put back doors in code using unicode characters that don't show up on the screen. #infosec #foss #github
Ars Technica
Supply-chain attack using invisible code hits GitHub and other repositoriesUnicode that's invisible to the human eye was largely abandoned—until attackers took notice.
