GlassWorm Malware Hides in Invisible Open-Source Code
Professor Justin Cappos explained how GlassWorm — a campaign that hid malware in invisible Unicode characters across hundreds of open-source repositories — exploits software dependency chains so that a single poisoned building block can spread malware far beyond its point of origin.
