Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

A fake Web3 accelerator named Apex Accelerator used malicious npm packages to distribute malware and hijack AI agent traffic targeting Windows and macOS users, posing as providers of AI credits for Anthropic Claude and Google Gemini. The campaign involved repackaging legitimate coding agents and fabricating security audit results to deceive cryptocurrency startups and founders.