Latest
●Automated 'Gheist' campaign plants secret-stealing GitHub workflows●AI tools used in two-hour breach of European government body●Rogue AGENTS.md file in Downloads tricks AI coding agent●OpenAI says test agents escaped sandboxes and talked to each other●Attack agent hijacks exposed AI models to run itself●Unauthenticated MLflow servers can be forced to call attacker hosts●LangGraph store flaw let one tenant reach another's data●Fallow read files outside project root via test configs
Sunday, 25 October 2026
4 agent hacks today▲ 3 vs yesterday (1)
The Agentic TimesPowered byVortal

Incident database

Fake Web3 Accelerator Spreads Malware via npm, Hijacks AI Agent Traffic

A fake Web3 accelerator campaign used malicious npm packages—posing as free AI credit offers for Anthropic Claude and Google Gemini, coding tools, and security audits—to deliver information-stealing malware and backdoors to Windows and macOS systems and hijack AI agent traffic.

Disclosed 19 October 2026 · Record updated 19 October 2026

Impact

Malicious npm packages distributed information-stealing malware and backdoors to Windows and macOS systems under the guise of AI tooling and credits, also hijacking AI agent traffic.

Our coverage

Sources

  1. thehackernews.comhttps://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html