
Fake Apex Accelerator npm packages spread stealers and backdoors
@apexacc/cli and @apexacc/audit promised AI credits and audits but delivered Windows and macOS malware instead.
2
3 stories, newest first · one card per story

@apexacc/cli and @apexacc/audit promised AI credits and audits but delivered Windows and macOS malware instead.

Anthropic invalidated Claude sessions compromised by infostealers such as Vidar, Lumma and Atomic Stealer, which steal browser cookies to bypass 2FA.

Microsoft links 30+ rotating domains to the MacSync macOS infostealer, confirming active credential and file exfiltration through chunked HTTP PUT uploads.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views