Glassworm Is Back: A New Wave of Invisible Unicode Attacks Hits Hundreds of Repositories

Aikido reports a renewed Glassworm campaign (March 2026) that uses invisible Unicode characters embedded in code strings to hide a decoder which evals a payload; the campaign has compromised hundreds of GitHub repositories and expanded to npm and the VS Code marketplace, with affected packages and extensions identified and prior behavior indicating second-stage payloads capable of stealing tokens, credentials, and secrets.