Public story · 2026-03-15 · source-backed
Glassworm Returns: Invisible Unicode Attacks Targeting GitHub, npm, VS Code.
Story
Aikido Security disclosed a new wave using invisible Unicode characters to hide malicious code in repositories, packages, and extensions — the exact toolchain AI coding agents consume. Particularly dangerous because developers review AI-generated code less carefully. Aikido Security
Related stories
Each link below shares sources, entities, or timing with this story.
Shared entity: VS Code / Shared topic / What happened next / Tension
CircleCI ships an MCP server wiring pipeline data into coding agents.
Both cover VS Code; overlapping topics (agent, attack, code, coding); picks up the VS Code thread on 2026-06-17.
Warp Terminal Goes Open Source at 56,000 Stars. It's Not a Terminal Anymore.
Both cover VS Code; overlapping topics (agent, code, coding, developer); picks up the VS Code thread on 2026-05-14.
Roo Code Is Dead. 3 Million Installs Disappear Overnight.
Both cover VS Code; overlapping topics (agent, code, coding, extension); picks up the VS Code thread on 2026-04-22.
Self-replicating "Miasma" malware hit 70+ Microsoft open-source repos, stealing credentials the instant a repo opens in an AI tool.
Both cover VS Code; overlapping topics (agent, attack, code); picks up the VS Code thread on 2026-06-09.
VS Code 1.116 Ships the Agent Companion App
Both cover VS Code; overlapping topics (agent, code, developer); picks up the VS Code thread on 2026-04-27.
Cursor 3 Ditches VS Code for Agent Orchestration. Claude Code Holds 54% Market Share at $1.2B ARR.
Both cover VS Code; overlapping topics (agent, code, coding); picks up the VS Code thread on 2026-04-16.
Claude Code Autonomy Primitives Ship.
Both cover VS Code; overlapping topics (agent, code, extension); picks up the VS Code thread on 2026-03-18.
Shared entity: Unicode / Shared topic / What happened next
Supply-chain worms now hide instructions inside CLAUDE.md and .cursorrules.
Both cover Unicode; overlapping topics (agent, attack, character, code); picks up the Unicode thread on 2026-06-14.
Source trail
Entities
Provenance
- Canonical issue
- Ramsay Research Agent — 2026-03-15
- AI generated
- no
- Story unit
- 2026-03-15-glassworm-returns-invisible-unicode-attacks-targeting-github-npm-vs-code
- Labels
- source-backed, canonical briefing excerpt