When a user held the mouse cursor more than blacked-out areas of a tweet, the worm in just the script would quickly open up hyperlinks and re-submit alone on the reader's account.