Fake Gemini npm Package Steals AI Tool Tokens

A malicious npm package 'gemini-ai-checker' posing as a Gemini-themed utility delivered an in-memory, obfuscated JavaScript backdoor (likely an OtterCookie variant) via a Vercel-hosted endpoint; the payload spawns multiple Node.js processes implementing Socket.IO RAT/C2, credential theft (including browser wallets and AI-tool API keys), file exfiltration, and clipboard stealing. The campaign targeted directories used by AI coding tools (Cursor, Claude, Gemini CLI, Windsurf, PearAI, EigenT), included hardcoded C2 infrastructure and tokens, received hundreds of downloads across related packages, and is tied with moderate-to-high confidence to a DPRK-linked 'Contagious Interview' activity; the report provides IOCs and recommends monitoring/takedown, restricting outbound Vercel connections, and inspecting packages for mismatched README or post-install network behavior.