Scammers Posing as Venture Accelerators Steal AI Prompts and Credentials From Crypto Devs via Malicious npm Packages

Threat actors operating under the name Apex Arena distributed malicious software disguised as legitimate development tools, according to GBHackers. The group posed as a Web3 venture-capital accelerator to target cryptocurrency founders and developers. They offered free credits for AI models Claude and Gemini, along with smart-contract security audits and AI coding tools. This social engineering approach aimed to lure victims into installing compromised packages.

In plain English

The attackers created a convincing front for their operation, claiming to support more than 200 portfolio projects. They also stated they had raised over $124 million to fund these efforts. By promoting founder assessments, job listings, and direct investor-relations messaging, they built trust with potential victims. However, the services were a façade. Instead of providing the promised legitimate support, the group used this cover to distribute harmful code through the npm package registry.

The background

The malicious npm packages were designed to install platform-specific malware on victim machines. On macOS systems, the packages installed backdoors that allowed remote access. On Windows systems, they installed information stealers capable of harvesting sensitive data. Once installed, the malware contacted attacker-controlled infrastructure and executed commands selected remotely by the operators. This gave the threat actors potential access to the compromised systems.

What changes now

Elastic Security Labs found that the attackers modified a legitimate multi-provider coding agent called Oh My Pi. The malicious fork added a bootstrap component that redirected traffic through Apex-controlled infrastructure. This allowed operators to access prompts, conversation history, code snippets, and tool outputs submitted through the AI assistant. The modified client also registered an attacker-controlled Model Context Protocol server, expanding the campaign’s control surface significantly.

What to do and how to stay safe: npm

• Verify the authenticity of npm packages before installation by checking their source repositories.
• Monitor network traffic for unexpected connections to unknown or attacker-controlled infrastructure.
• Review installed software for unauthorized modifications or additional components like bootstrap scripts.
• Once the vendor provides an update, apply patches to any systems that may have been exposed.

General security guidance from the RedTeam Monitor newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What specific services did the fake accelerator offer to victims?

The group offered free Claude and Gemini credits, AI coding tools, and smart-contract security audits.

How did the attackers access sensitive AI data from victims?

They redirected AI assistant traffic through their infrastructure to observe prompts and code snippets.

What type of malware was installed on Windows and macOS systems?

Windows systems received information stealers, while macOS systems were infected with backdoors.