Supply-chain attack using invisible code hits GitHub and other repositories

An invisible-code supply-chain attack has infiltrated GitHub and other repositories, potentially compromising 15,000 software projects through hidden zero-width Unicode characters. This exploit embeds malicious logic into source code without visible traces, making detection 80% harder than traditional malware injection.