↓
Skip to main content
PiniShv | AI Transformation & Autonomous Engineering
pinishv
Articles
About
Work with me
Accessibility settings
Disable blur
Disable images
Show link underline
Enable zen mode
Font size
default
12px
14px
16px
18px
20px
22px
24px
Accessibility settings
Disable blur
Disable images
Show link underline
Enable zen mode
Font size
default
12px
14px
16px
18px
20px
22px
24px
Articles
About
Work with me
Npm
Glassworm Is Back. Your Code Review Won't Catch It.
22 March 2026
·
924 words
·
5 mins
Security
Supply Chain
AI
GitHub
Npm
Unicode
DevSecOps
Open Source
151 malicious packages in one week. The payload is invisible. Literally invisible. Glassworm uses Unicode characters that don’t render in any …