
New ‘IndonesianFoods’ worm floods npm with 100,000 packages
Published on November 13, 2025
A self-spreading package published on npm spams the registry by spawning new packages every every seven seconds, creating large volumes of junk. [...]

A self-spreading package published on npm spams the registry by spawning new packages every every seven seconds, creating large volumes of junk. [...]