malware
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
Medium
Summary
A fake Web3 accelerator, operating under the name Apex Accelerator and tracked as REF8801, has been distributing malicious npm packages to cryptocurrency startups and founders. The scheme involves intercepting and redirecting OpenRouter large language model (LLM) traffic, allowing attackers to influence the agent's actions.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data