https://attack.mitre.org/techniques/T1036/002/ (from early 2020 on left-to-right override masquerading)

And as to slipping something like this in a FOSS project, GNU diff still doesn't understand Unicode :-) It should flag the mess as a change. (On the assumption the most likely target of an attack is an existing privilege check.)