https://netsec.expert/posts/write-a-crypter-in-any-language/ https://gist.github.com/ctigeek/2a56648b923d198a6e60

Trojan Source AttacksSome Vulnerabilities are InvisibleRather than inserting logical bugs, adversaries can attack the encoding of source code files to inject vulnerabilities.These adversarial encodings produce no visual artifacts. 只能說以後Coding Guidance真的要好好遵守了. 註解夾在Source Code裡面真的會造成安全性問題. 但最終的問題還是在於使用外部Library的時候要怎麼預防...真的難... trojan-sourceDownload