Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

A fake Web3 accelerator calling itself Apex Accelerator has been pushing information stealers and backdoors to Windows and macOS systems through malicious npm packages, The Hacker News reports. Elastic Security Labs says the packages, promoted with offers of free AI credits and security audits, also repackaged a legitimate coding agent to route model requests through attacker-controlled services.