Hackers exploit hidden Unicode characters to conceal malicious payloads in software supply chains, bypassing AI and human review.