China’s OpenClaw AI boom is a national trend sweeping the country’s major tech companies, but it has also triggered cybersecurity fears.
The technique exploits Unicode Private Use Area characters, which render as zero-width whitespace in virtually every code editor and terminal.
GlassWorm campaign used 72 malicious Open VSX extensions and infected 151 GitHub repositories, enabling stealth supply-chain attacks on developers.