Supply-chain attack using invisible code hits GitHub and other repositories

“Attackers are exploiting invisible Unicode characters to inject malicious code into GitHub and other repositories, creating a supply-chain vulnerability that bypasses human code review. This technique poses significant risks to AI development pipelines and open-source projects that rely on these platforms for training data and model dependencies.”