IndonesianFoods Worm Infects npm with Over 44,000 Malicious Packages

IndonesianFoods Worm Infects npm with Over 44,000 Malicious Packages

First seen 13 Nov 2025, 17:30 UTC •ThecyberexpressInfosecurity-Magazine •82% similarity •32.7

Article Content

Browse articles
ThreatCluster

A large-scale spam campaign known as the IndonesianFoods worm has targeted the npm ecosystem, deploying over 43,000 malicious packages across at least 11 user accounts. This attack, which has been ongoing for more than two years, aims to pollute the npm registry with junk packages rather than stealing user credentials or data.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

IndonesianFoods Glassworm Indonesian Foods Worm Shai Hulud Campaign