
Fake Web3 Accelerator Distributes Malware via Malicious npm Packages
MalwareCybersecuritySocial EngineeringSupply Chain Attack
A fake Web3 accelerator has been distributing information stealers and backdoors to Windows and macOS systems through malicious npm packages. The threat actors lured victims by offering free artificial intelligence credits for Anthropic Claude and Google Gemini, coding tools, and security audits. The malicious tools delivered information-stealing malware and backdoors targeting both macOS and Windows machines, according to Elastic.