Supply-chain attack using invisible code hits GitHub and other repositories

A supply-chain attack uses invisible code to infiltrate GitHub repositories, and the stealth method suggests a new wave of hacks that are nearly impossible to detect until it’s too late.