{
 "id": "AIR-2026-1405",
 "slug": "fake-web3-accelerator-uses-malicious-npm-packages-to-distrib",
 "title": "Fake Web3 Accelerator Uses Malicious npm Packages to Distribute Malware",
 "summary": "Threat actors deployed malicious npm packages offering free AI credits to deliver information stealers to developer machines. The campaign targeted users seeking access to prominent AI platforms.",
 "type": "ai_enabled_attack",
 "categories": [
  "supply_chain",
  "ai_phishing_social_engineering"
 ],
 "severity": 3,
 "targets": [
  "Anthropic",
  "Google",
  "individual_victims"
 ],
 "products": [
  "Claude",
  "Gemini"
 ],
 "incident_date": "2026-10-19",
 "incident_date_precision": "day",
 "first_reported": "2026-10-19",
 "sources": [
  {
   "url": "https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html",
   "publisher": "The Hacker News",
   "title": "Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic",
   "published_at": "2026-10-19"
  }
 ],
 "source_count": 1,
 "confidence": 0.9,
 "status": "published",
 "origin": "news",
 "tags": [
  "npm",
  "information_stealer",
  "malware",
  "supply_chain"
 ],
 "created_at": "2026-10-19T13:12:24.048Z",
 "updated_at": "2026-10-19T13:12:24.048Z"
}