Try...
for f in src/*.js; do cp $f /tmp/package/$f; done
so for what you were doing originally...
for f in `echo "src/prog.js images/icon.jpg"`; do cp $f /tmp/package/$f; done
or
v="src/prog.js images/icon.jpg"; for f in $v; do cp $f /tmp/package/$f; done