Supply-chain attack using invisible code hits GitHub and other repositories

A supply-chain attack using invisible code targets GitHub and other repositories, a subtle but devastating exploit that could compromise thousands of software projects.