Pax says the worm hides his XSS bug to make it harder to detect and patch, and he hopes to sell the program for close to a thousand euros.

FORBES: Updated with a more detailed statement from Yahoo! below.