Article and title updated to remove the term "worm". See update below. An auto-spamming payload published on npm spams the registry by spawning new packages every seven seconds, creating large volumes ...