Security News Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack TheHackerNews Daniel Bender 12 Nov 2025 A mysterious npm worm published 46K fake packages in a two-year spam campaign, exposing major security gaps.