The only way a worm like this spreads is usage of the affected packages. The proliferation itself is clear evidence of use.