Fake Web3 Scam Spreads Malware via npm, Targets AI Users — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Fake Web3 accelerator distributes malicious npm packages under the guise of offering free AI credits for Anthropic Claude and Google Gemini, coding tools, and security audits
- Malicious npm packages deliver information stealers and backdoors to Windows and macOS systems, enabling long-term access and data theft
- The Hacker News reports the campaign uses the ROMULUS ClickFix platform to deploy LegionLoader and other malware, linking infrastructure to broader malicious activity
Why it matters: Developers using npm packages for AI tooling are at direct risk of credential and data theft, as attackers exploit trust in legitimate services like Anthropic and Google Gemini. The use of trusted brand names in fake offers increases success rates for malware delivery.
Ask SkimNews
