Malware Campaign Exploits Web3 Sector with npm Packages

Elastic Security Labs researchers uncovered a malware campaign, dubbed REF8801, that hides in seemingly legitimate Web3 npm packages and delivers information-stealing malware and backdoors to victims lured with promises of free AI credits. The campaign masquerades as a Web3 venture capital accelerator called Apex Accelerator.

Malware lurks in seemingly legit Web3 npm packages, delivering info-stealing malware and backdoors to unsuspecting victims who were lured in with promises of free AI credits. Elastic Security Labs researchers uncovered this sneaky campaign, dubbed REF8801, which masquerades as a Web3 venture capital accelerator called Apex Accelerator.