AI Security
Code You Cannot See: GlassWorm and the End of "Review Will Catch It"
GlassWorm hides executable code inside Unicode characters that render as nothing at all. It spread through VS Code extensions, self-propagating with stolen credentials, and reached 35,800 installs. Here is why the characters are invisible, where you step on them, and how to defend once visual review no longer works.
2026-08-13Ryuta Hamamoto
![Automating Code Review with Claude Code: A Practical Guide to Superpowers and Hooks [2026 Edition]](/images/columns/claude-code-automated-code-review/cover.en.png?dpl=dpl_J7AVSk9w7pKPQHgiFZAWKwQdaahH)