Fake Web3 Accelerator Distributes Malware via npm Packages Under AI Credit Pretense
Original headline: Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
A fake Web3 accelerator was observed offering free AI credits for Anthropic Claude and Google Gemini while distributing malicious npm packages. The packages installed information-stealing malware and backdoors on Windows and macOS systems. Elastic reported the findings.
The abuse of the npm ecosystem shows how AI‑credit scams can amplify malware distribution, raising security risks.
Research angleHow does the distribution of malicious npm packages affect developers' security behavior intentions? — Protection Motivation Theory
Turn this security issue into a research project
HJITM works with researchers from study design through surveys, analysis and submission to international journals in generative AI and technology management. Bring us your research question.
This item is an AI-generated summary of reporting by The Hacker News. Please check the original article for accuracy. Copyright in the original article belongs to The Hacker News.