IndonesianFoods Worm Floods npm with Over 100,000 Spam Packages

A large-scale spam campaign, known as the IndonesianFoods worm, has inundated the npm registry with over 100,000 spam packages. This campaign, which has been ongoing for more than two years, utilizes at least 11 accounts to publish packages that do not contain malicious code but significantly pollute the registry. The packages are named using random Indonesian food terms, contributing to the campaign's unique identity.