# Malware Campaign Exploits Web3 Sector with npm Packages

> Source: <https://osintsights.com/malware-campaign-exploits-web3-sector-with-npm-packages>
> Published: 2026-10-19 11:55:56+00:00

Malware lurks in seemingly legit Web3 npm packages, delivering info-stealing malware and backdoors to unsuspecting victims who were lured in with promises of free AI credits. Elastic Security Labs researchers uncovered this sneaky campaign, dubbed REF8801, which masquerades as a Web3 venture capital accelerator called Apex Accelerator.