Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

A fake Web3 accelerator is distributing malware and backdoors to Windows and macOS systems through malicious npm packages. The packages are disguised as offerings of free artificial intelligence credits and other services. The malware delivered by these packages includes information stealers and backdoors for both macOS and Windows machines. The fake accelerator promises benefits such as AI credits for Anthropic Claude and Google Gemini, as well as coding tools and security audits. The ultimate goal is to hijack AI agent traffic. The malicious packages are being used to compromise systems and steal sensitive information.