New ‘IndonesianFoods’ worm floods npm with 100,000 packages

Published on November 13, 2025

A self-spreading package published on npm spams the registry by spawning new packages every every seven seconds, creating large volumes of junk. [...]