Post B4HPQWwUu4MnqPLjuK by simon_brooke@mastodon.scot
 (DIR) More posts by simon_brooke@mastodon.scot
 (DIR) Post #B4HPQWwUu4MnqPLjuK by simon_brooke@mastodon.scot
       0 likes, 1 repeats
       
       "The code points represent every letter of the US alphabet when fed to computers, but their output is completely invisible to humans. People reviewing code or using static analysis tools see only whitespace or blank lines. To a #JavaScript interpreter, the code points translate into executable code."Sigh.https://arstechnica.com/security/2026/03/supply-chain-attack-using-invisible-code-hits-github-and-other-repositories/
       
 (DIR) Post #B4HPQXpRbmJqap3cYK by simon_brooke@mastodon.scot
       0 likes, 0 repeats
       
       Full disclosure, my post-scarcity #Lisp implementation uses the full UTF character set, and I do have standard functions (for example λ) with names composed entirely of non-latin characters; this means that it too is at least somewhat vulnerable to this attack, although you would still be able to see the brackets.