remove spambomb.js, update package.json