Credit: The original article is published here.
Someone has been flooding npm with wormlike packages in a bid to get as many crypto tokens as they can.
Amazon researchers uncover major token farming malware scam – over 150,000 malicious packages found
![[Aggregator] Downloaded image for imported item #62564](https://kcmicro.com/wp-content/uploads/2025/11/hsp2hXrMRpqTNDhd2ZFJof-1280-80-1-800x500.jpg "[Aggregator] Downloaded image for imported item #62564")
![[Aggregator] Downloaded image for imported item #62530](https://kcmicro.com/wp-content/uploads/2025/11/krBVBETP6cmxBcihGXQFy8-1280-80-800x500.jpg "[Aggregator] Downloaded image for imported item #62530")
![[Aggregator] Downloaded image for imported item #62509](https://kcmicro.com/wp-content/uploads/2025/11/LUvpjsYFmoug6huuzFtM4m-1280-80-800x500.jpg "[Aggregator] Downloaded image for imported item #62509")