npm package contained hidden malware by using Private Use Access unicode characters 
You're Invited: Delivering malware via Google Calendar invites and PUAs
Threat actor used malicious Google Invites and hidden Unicode βPrivate Use Accessβ characters (PUAs) to brilliantly obfuscate and hide a malici...


