Comment by omoikane

5 months ago

The source code version of that is CVE-2021-42574, and they have a website:

Basically it's possible to hide some code that looks like comments but compiles like code. I seem to recall the CVE status was disputed since many text editors already make these suspicious comments visible.