The attackers behind the nx attack have struck again, targeting a large amount of packages, with a first-of-its-kind worm payload.