Whitespace Padding Concealment
discovered 2026-07-14Malicious obfuscated JavaScript placed on the first line of a legitimate source file after ~1,000 bytes of whitespace padding, so it scrolls off-screen in most editors and renders as an apparently blank/normal line.