← The Wire

Public story · 2026-03-15 · source-backed

Glassworm Returns: Invisible Unicode Attacks Targeting GitHub, npm, VS Code.

Confidence
source-backed
Sources
1
Redaction
passed

Story

Aikido Security disclosed a new wave using invisible Unicode characters to hide malicious code in repositories, packages, and extensions — the exact toolchain AI coding agents consume. Particularly dangerous because developers review AI-generated code less carefully. Aikido Security

Related stories

Each link below shares sources, entities, or timing with this story.

  1. Shared entity: VS Code / Shared topic / What happened next / Tension

    CircleCI ships an MCP server wiring pipeline data into coding agents.

    Both cover VS Code; overlapping topics (agent, attack, code, coding); picks up the VS Code thread on 2026-06-17.

  2. Warp Terminal Goes Open Source at 56,000 Stars. It's Not a Terminal Anymore.

    Both cover VS Code; overlapping topics (agent, code, coding, developer); picks up the VS Code thread on 2026-05-14.

  3. Roo Code Is Dead. 3 Million Installs Disappear Overnight.

    Both cover VS Code; overlapping topics (agent, code, coding, extension); picks up the VS Code thread on 2026-04-22.

  4. Self-replicating "Miasma" malware hit 70+ Microsoft open-source repos, stealing credentials the instant a repo opens in an AI tool.

    Both cover VS Code; overlapping topics (agent, attack, code); picks up the VS Code thread on 2026-06-09.

  5. VS Code 1.116 Ships the Agent Companion App

    Both cover VS Code; overlapping topics (agent, code, developer); picks up the VS Code thread on 2026-04-27.

  6. Cursor 3 Ditches VS Code for Agent Orchestration. Claude Code Holds 54% Market Share at $1.2B ARR.

    Both cover VS Code; overlapping topics (agent, code, coding); picks up the VS Code thread on 2026-04-16.

  7. Claude Code Autonomy Primitives Ship.

    Both cover VS Code; overlapping topics (agent, code, extension); picks up the VS Code thread on 2026-03-18.

  8. Shared entity: Unicode / Shared topic / What happened next

    Supply-chain worms now hide instructions inside CLAUDE.md and .cursorrules.

    Both cover Unicode; overlapping topics (agent, attack, character, code); picks up the Unicode thread on 2026-06-14.

Source trail

Entities

Provenance

AI generated
no
Story unit
2026-03-15-glassworm-returns-invisible-unicode-attacks-targeting-github-npm-vs-code
Labels
source-backed, canonical briefing excerpt