Fake Web3 Accelerator Distributes Malicious npm Packages Targeting Developers and AI Enthusiasts

In October 2026, Elastic researchers identified a campaign leveraging the popularity of Web3 and artificial intelligence to distribute malware through the npm registry. The threat actors behind the fake Web3 accelerator lured victims with promises of free AI credits for major platforms such as Anthropic Claude and Google Gemini, as well as coding tools and security audits. The malicious npm packages were designed to appear legitimate, targeting developers and AI enthusiasts seeking these resources.

Upon execution, the packages delivered information-stealing malware and backdoors for both Windows and macOS. The stealers exfiltrate sensitive data from infected machines, while the backdoors provide remote access, enabling further compromise of the system and potentially AI agent traffic. Elastic noted that the attack relies on social engineering, exploiting the current interest in Web3 and AI to trick users into installing the compromised packages.

The campaign underscores the ongoing risks in the npm ecosystem and the importance of verifying the legitimacy of packages, particularly those offering free tools or credits in high-interest areas such as artificial intelligence and Web3.