Indonesian Foods Worm is a malware family tracked across 2 threat clusters and 1 intelligence report mention on ThreatCluster. First observed November 13, 2025; most recent activity November 13, 2025.
Indonesian Foods Worm is a malware family linked to a large-scale campaign that distributes malicious payloads via the npm package registry. The operation leverages fake or compromised npm packages to reach developers, highlighting a significant supply-chain risk in open-source ecosystems. Its prominence lies in demonstrating how threat actors monetize npm distribution to spread malware widely.
A large-scale spam campaign known as the IndonesianFoods worm has targeted the npm ecosystem, deploying over 43,000 malicious packages across at least 11 user accounts. This attack, which has been ongoing for more than…
A large-scale spam campaign, known as the IndonesianFoods worm, has inundated the npm registry with over 100,000 spam packages. This campaign, which has been ongoing for more than two years, utilizes at least 11…