Fake Web3 accelerator packages steal data and redirect AI agent requests

Elastic Security Labs researchers identified malicious npm packages posing as tools from a Web3 accelerator that deploy Windows information stealers and macOS backdoors while redirecting AI agent requests through attacker-controlled services. The operation targets cryptocurrency startups and founders with offers of investment, free AI credits, and security audits. The packages can intercept OpenRouter traffic and register an attacker-controlled server in an agent's configuration. That exposes prompts, conversation history, code snippets, and tool outputs, while allowing attackers to supply instructions that influence subsequent agent actions. Their purported security tools fabricate findings. The packages and associated GitHub repositories are no longer accessible.