Last seen October 19, 2026

Claude Security Incident

A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits. "The tools delivered information-stealing malware and backdoors for macOS and Windows machines," Elastic

Technical Severity
Low severity
Lifecycle Status

NEW

Sources

What Happened

A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits. "The tools delivered information-stealing malware and backdoors for macOS and Windows machines," Elastic

Why This Matters

Current evidence identifies a security issue involving Claude, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Claude is present in your environment and review the affected configuration.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Oct 19, 2026 15:36

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Primary entities:

AnthropicGoogleClaudeGeminiAI AgentsFake

Timeline

  • Incident first seen
    Oct 19, 2026 15:36

    BugSkan first recorded this incident.

  • Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
    Oct 19, 2026 15:36

    thehackernews.com · Research

Sources

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

thehackernews.com · Oct 19, 2026 15:36

A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits. "The tools delivered information-stealing malware and backdoors for macOS and Windows machines," Elastic

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence