Elastic Security Labs: Auditing the auditor, unmasking Apex Accelerator

Evidence record

Original Oct 12 malware and agent supply-chain investigation: installer paths, modified Oh My Pi, OpenRouter interception and synthetic security results.

Read the original source ↗

Claim-level citations (3)

• supportsA fake accelerator combined malware, altered agent routing and fabricated MCP audits: The modified coding agent configured an Apex-controlled OpenRouter base URL and persistent remote MCP configuration; a controlled file read was observed reaching infrastructure outside the intended provider route.

  Remote MCP and LLM routing expand the software control surface

• supportsA fake accelerator combined malware, altered agent routing and fabricated MCP audits: Elastic identified @apexacc/cli and @apexacc/audit launchers that retrieved platform-specific executables, with a Windows infostealer and macOS CloudSyncD paths.

  Malicious npm packages and delivery chains; Windows and macOS sections

• supportsA fake accelerator combined malware, altered agent routing and fabricated MCP audits: All 18 published @apexacc/audit tool handlers returned fabricated or synthetic findings rather than performing their advertised audits.

  Fabricated MCP audit results and handler inspection