Unverified50% confidenceFactExact time
Trojan Source is a class of source code supply chain attack disclosed in 2021 that uses Unicode bidirectional control characters (such as U+202E) to make source code display in a different order than it is parsed, and the technique works equally well in natural language text.
1
Sources
50%
Confidence
Long-term
Relevance
10/19/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedTrojan Source攻击由剑桥大学研究者Nicholas Boucher和Ross Anderson于2021年在ACM CCS上披露，被分配CVE-2021-42574编号，利用Unicode双向文本控制字符使代码在人眼阅读与编译器解析时呈现不同逻辑76% similarUnverifiedIn 2021, researchers at the University of Cambridge named the attack that uses Unicode bidirectional control characters for visual deception the Trojan Source attack and demonstrated that mainstream compilers and interpreters including GCC, Clang, Python, and Rust are all affected.70% similarUnverified编码混淆攻击将违规信息用Base64等方式编码后输入，可绕过基于关键词的表层过滤机制59% similarUnverifiedHackerOne report #3086545 demonstrates an attack using Unicode Tag character blocks (U+E0000–U+E007F) for invisible prompt injection.59% similarUnverifiedTyposquatting is one of the most common techniques in supply chain attacks, where attackers register malicious packages with names extremely similar to popular packages to exploit developer typos and trigger malicious code.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1066746API
curl https://kongchang.com/api/v1/knowledge/claims/1066746MCP
get_claim(id=1066746)