Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
- Posted on November 13, 2025
- By The Hacker News
- 4 Views
Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack

A mysterious npm worm published 46K fake packages in a two-year spam campaign, exposing major security gaps.