A Unicode variation selector is a special code point that tells a font to display the preceding character in an alternate form. In many contexts it renders invisibly, which makes it easy to miss during manual review. The visible text may look normal, while the underlying bytes are different.
That matters in cyber security because attackers can use variation selectors to hide suspicious strings, confuse reviewers, or bypass simple pattern matching. In package names, source code, or configuration text, they can make malicious content harder to spot without changing how it appears on screen. Defenders reduce this risk by normalizing Unicode, comparing raw code points, and using tools that reveal invisible characters. Security scans should also flag unexpected Unicode in identifiers, filenames, and extension metadata.