A fake Web3 accelerator is distributing information-stealing malware and backdoors to Windows and macOS systems.
The malicious activity utilizes compromised npm packages, falsely advertised as offering free AI credits for Anthropic Claude and Google Gemini, along with coding tools and security audits.
“The tools delivered information-stealing malware and backdoors for macOS and Windows machines,”
Sources and references
Original report
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
The Hacker News
Read on The Hacker News (opens in a new tab)Ref 00Z41LSZ
Cite this
APA
Interestana AI Editorial. (2026, October 19). Fake Web3 Accelerator Spreads Malware via npm Packages. Interestana. https://interestana.com/articles/fake-web3-accelerator-uses-npm-packages-to-spread-malware-and-hijack-ai-agent-traffic-00z41lsz
MLA
“Fake Web3 Accelerator Spreads Malware via npm Packages.” Interestana, 19 Oct. 2026, interestana.com/articles/fake-web3-accelerator-uses-npm-packages-to-spread-malware-and-hijack-ai-agent-traffic-00z41lsz.
Chicago
Interestana AI Editorial. “Fake Web3 Accelerator Spreads Malware via npm Packages.” Interestana, October 19, 2026. https://interestana.com/articles/fake-web3-accelerator-uses-npm-packages-to-spread-malware-and-hijack-ai-agent-traffic-00z41lsz.
BibTeX
@misc{interestana_00z41lsz,
author = {{Interestana AI Editorial}},
title = {{Fake Web3 Accelerator Spreads Malware via npm Packages}},
howpublished = {Interestana},
year = {2026},
month = oct,
url = {https://interestana.com/articles/fake-web3-accelerator-uses-npm-packages-to-spread-malware-and-hijack-ai-agent-traffic-00z41lsz},
note = {Summary of reporting by The Hacker News, https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html}
}Credit the source
Original reporting: The Hacker News, “Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic”, https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html(opens in a new tab)
Follow this story
Get Cybersecurity in your inbox — new stories in 40 words or fewer, once a week.
Subscribe