What happened in this Tech story?

A fake Web3 accelerator is distributing information stealers and backdoors to Windows and macOS systems through malicious npm packages disguised as free Anthropic Claude and Google Gemini API credits, coding tools, and security audits.

What is a key fact in this story? (1)

**A fake Web3 accelerator** is pushing information stealers and backdoors to Windows and macOS systems via malicious npm packages, exploiting trust in the npm registry

What is a key fact in this story? (2)

**The malicious packages** are disguised as offerings of free AI credits for Anthropic Claude and Google Gemini, plus coding tools and security audits — bait aimed at developers building AI-integrated software

Fake Web3 Accelerator Spreads Malware via npm — SkimNews

By The Hacker News · Summarized & edited by Kapil Samant · 2026-10-19

Get the Tech newsletter

Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.

A fake Web3 accelerator is pushing information stealers and backdoors to Windows and macOS systems via malicious npm packages, exploiting trust in the npm registry
The malicious packages are disguised as offerings of free AI credits for Anthropic Claude and Google Gemini, plus coding tools and security audits — bait aimed at developers building AI-integrated software

Why it matters: The lure specifically targets developers by dangling free Claude and Gemini API credits — a population now growing fast as AI-assisted coding becomes standard. Because the malicious packages are hosted on npm, a widely trusted registry, any developer who installs what looks like legitimate AI tooling risks credential theft and remote system access across both major desktop platforms.