Hackers Use Fake Gemini npm Package to Steal Tokens From Claude, Cursor, and Other AI Tools

A malicious npm package 'gemini-ai-checker' was published to target AI software developers by fetching and executing an in-memory JavaScript payload (OtterCookie) from a Vercel staging endpoint; the backdoor, attributed to a DPRK-linked campaign, exfiltrates browser credentials, over 25 cryptocurrency wallets, AI tool directories (Cursor, Claude, Windsurf, PearAI, Gemini CLI, Eigent AI), and source files, communicates with C2 at 216.126.237.71, and seeks to evade detection via fragmented C2 strings and in-memory execution; defenders are advised to monitor/block Vercel outbound traffic, verify npm package contents, and use KQL/Node.js process detections.