Trojan Source
Trojan Source is a source-code supply-chain attack technique that exploits Unicode bidirectional control characters so that the order in which source code appears in an editor differs from the order in which the compiler actually parses it, thereby concealing malicious logic.
Timeline (last 90 days)
Trojan Source is a class of source code supply chain attack disclosed in 2021 that uses Unicode bidirectional control characters (such as U+202E) to make source code display in a different order than it is parsed, and the technique works equally well in natural language text.
Trojan Source攻击利用Unicode双向文本控制字符（如RLO等），使代码在编辑器显示与编译器解析时呈现不同逻辑，从而植入难以察觉的后门
Trojan Source攻击由剑桥大学研究者Nicholas Boucher和Ross Anderson于2021年在ACM CCS上披露，被分配CVE-2021-42574编号，利用Unicode双向文本控制字符使代码在人眼阅读与编译器解析时呈现不同逻辑
Trojan Source漏洞几乎影响所有主流编程语言，包括C、C++、Python、JavaScript、Rust、Go等
NullOrigin会扫描AI生成的代码，检测其中的Trojan Source漏洞
All Facts (5)
Trojan Source is a class of source code supply chain attack disclosed in 2021 that uses Unicode bidirectional control characters (such as U+202E) to make source code display in a different order than it is parsed, and the technique works equally well in natural language text.
50%UnverifiedTrojan Source攻击利用Unicode双向文本控制字符（如RLO等），使代码在编辑器显示与编译器解析时呈现不同逻辑，从而植入难以察觉的后门
50%UnverifiedTrojan Source攻击由剑桥大学研究者Nicholas Boucher和Ross Anderson于2021年在ACM CCS上披露，被分配CVE-2021-42574编号，利用Unicode双向文本控制字符使代码在人眼阅读与编译器解析时呈现不同逻辑
50%UnverifiedTrojan Source漏洞几乎影响所有主流编程语言，包括C、C++、Python、JavaScript、Rust、Go等
50%UnverifiedNullOrigin会扫描AI生成的代码，检测其中的Trojan Source漏洞
50%