Public story · 2026-03-15 · source-backed

Glassworm Returns: Invisible Unicode Attacks Targeting GitHub, npm, VS Code.

Issue

2026-03-15

Confidence

source-backed

Sources

Redaction

passed

Story

Aikido Security disclosed a new wave using invisible Unicode characters to hide malicious code in repositories, packages, and extensions — the exact toolchain AI coding agents consume. Particularly dangerous because developers review AI-generated code less carefully. Aikido Security

VS Code supports Codex / Shared entity: VS Code / Shared topic / What happened next / Tension
Roo Code Is Dead. 3 Million Installs Disappear Overnight.
Linked by a graph relationship (VS Code supports Codex); both cover VS Code; overlapping topics (agent, code, coding, extension).
VS Code supports MCP / Shared entity: VS Code / Shared topic / What happened next / Tension
CircleCI ships an MCP server wiring pipeline data into coding agents.
Linked by a graph relationship (VS Code supports MCP); both cover VS Code; overlapping topics (agent, attack, code, coding).
VS Code supports Codex / Shared entity: VS Code / Shared topic / What happened next / Tension
Warp Terminal Goes Open Source at 56,000 Stars. It's Not a Terminal Anymore.
Linked by a graph relationship (VS Code supports Codex); both cover VS Code; overlapping topics (agent, code, coding, developer).
VS Code supports Agent Host Protocol / Shared entity: VS Code / Shared topic / What happened next / Tension
VS Code 1.129 shipped an "agent host" so agents can manage other agents.
Linked by a graph relationship (VS Code supports Agent Host Protocol); both cover VS Code; overlapping topics (agent, code, coding).
Miasma criticizes VS Code / Shared entity: VS Code / Shared topic / What happened next / Tension
Self-replicating "Miasma" malware hit 70+ Microsoft open-source repos, stealing credentials the instant a repo opens in an AI tool.
Linked by a graph relationship (Miasma criticizes VS Code); both cover VS Code; overlapping topics (agent, attack, code).
Claude Code uses VS Code / Shared entity: VS Code / Shared topic / What happened next / Tension
VS Code 1.116 Ships the Agent Companion App
Linked by a graph relationship (Claude Code uses VS Code); both cover VS Code; overlapping topics (agent, code, developer).
VS Code supports Codex / Shared entity: VS Code / Shared topic / What happened next / Tension
Cursor 3 Ditches VS Code for Agent Orchestration. Claude Code Holds 54% Market Share at $1.2B ARR.
Linked by a graph relationship (VS Code supports Codex); both cover VS Code; overlapping topics (agent, code, coding).
VS Code supports Codex / Shared entity: VS Code / Shared topic / What happened next
Cursor 3 Says the IDE Is Now a "Fallback," and They Might Be Right
Linked by a graph relationship (VS Code supports Codex); both cover VS Code; overlapping topics (agent, code, coding, developer).

Source trail

Aikido Security

Entities

Aikido Security Glassworm Returns Invisible Unicode Attacks Targeting GitHub Particularly Unicode VS Code

Provenance

Canonical issue: Ramsay Research Agent — 2026-03-15
AI generated: no
Story unit: 2026-03-15-glassworm-returns-invisible-unicode-attacks-targeting-github-npm-vs-code
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

Glassworm Returns: Invisible Unicode Attacks Targeting GitHub, npm, VS Code.

Story

Related stories

Roo Code Is Dead. 3 Million Installs Disappear Overnight.

CircleCI ships an MCP server wiring pipeline data into coding agents.

Warp Terminal Goes Open Source at 56,000 Stars. It's Not a Terminal Anymore.

VS Code 1.129 shipped an "agent host" so agents can manage other agents.

Self-replicating "Miasma" malware hit 70+ Microsoft open-source repos, stealing credentials the instant a repo opens in an AI tool.

VS Code 1.116 Ships the Agent Companion App

Cursor 3 Ditches VS Code for Agent Orchestration. Claude Code Holds 54% Market Share at $1.2B ARR.

Cursor 3 Says the IDE Is Now a "Fallback," and They Might Be Right

Source trail

Entities

Provenance

Glassworm Returns: Invisible Unicode Attacks Targeting GitHub, npm, VS Code.

Story

Related stories

Roo Code Is Dead. 3 Million Installs Disappear Overnight.

CircleCI ships an MCP server wiring pipeline data into coding agents.

Warp Terminal Goes Open Source at 56,000 Stars. It's Not a Terminal Anymore.

VS Code 1.129 shipped an "agent host" so agents can manage other agents.

Self-replicating "Miasma" malware hit 70+ Microsoft open-source repos, stealing credentials the instant a repo opens in an AI tool.

VS Code 1.116 Ships the Agent Companion App

Cursor 3 Ditches VS Code for Agent Orchestration. Claude Code Holds 54% Market Share at $1.2B ARR.

Cursor 3 Says the IDE Is Now a "Fallback," and They Might Be Right

Source trail

Entities

Provenance