Crypto enthusiasts flood npm with more than 281,000 bogus packages overnight

Crypto enthusiasts have been crowding software registries like npm and PyPI with thousands of pointless packages, thereby straining the open-source ecosystem. In one instance recorded by Sonatype in 2024, over 281,000 distinct packages appeared on npmjs.com overnight, all named in gibberish Latin.
Source: securityboulevard.com
- Read more