NPM JavaScript packages abused to create scambait links in bulk Posted 2 years ago by Paul Ducklin Free spins? Bonus game points? Cheap social media followers? What harm could it possibly do if you just take a tiny little look?!