Malicious Web3 Accelerator Exploits npm Packages to Deploy Information-Stealing Malware and Hijack AI Traffic

A fake Web3 accelerator distributed malicious npm packages, delivering information-stealing malware and backdoors for Windows and macOS systems. The attack also hijacked AI agent traffic, leveraging deceptive AI credit offers from Anthropic Claude and Google Gemini.

A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits.

"The tools delivered information-stealing malware and backdoors for macOS and Windows machines," Elastic

Read original article