A fake Web3 accelerator used malicious npm packages to drop stealers on macOS and Windows and reroute AI coding agent traffic to its servers. Related Posts: Ledger Supply Chain Attack Hits Europe via Tampered Wallets AI Agent Attack Turns One Exposed Endpoint Into a Full Server Takeover in Under 24 Hours Warden Stealer Rust Infostealer Targets AI Coding Agent Tokens and Browser Data The post Malicious npm Packages From Fake Web3 Accelerator Apex Deliver Stealers and Hijack AI Coding Agents ap

CloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to remote C2 servers.