How can I prevent the new indexing bug from creating useless pages on Google?

It does happen to me as well. But it’s different to me.

robots.txt has blocked the crawling of those pages:

Disallow: /wpm@*

Also, noindex,nofollow is used.

Since the robots.txt doesn’t allow crawling, noindex,nofollow can’t be read by Google. And Google also just indexed one of those pages as well, their might follow more. The best way to deindex pages, that are indexed, even though their crawling should be blocked, is to remove the robots.txt statement and use noindex.

You can additionally request a removal (URLs starting with domain.com/wpm@) and can request a check of indexed pages, although blocked by robots.txt in the Search Console, after deleting the robots.txt statement.