Fake Gemini npm Package Steals AI Tool Tokens

A malicious npm package published March 20, 2026 — gemini-ai-checker, under the account gemini-check — posed as a Google Gemini token verifier and contained a hidden payload that harvested authentication tokens, files, and credentials from developer environments. The trojanized package targeted dev workflows that integrate AI coding assistants and IDE plugins, exfiltrating secrets tied to Claude, Cursor, Windsurf, PearAI and other tools. The package’s README was copied from an unrelated library (chai-await-async), a mismatch that should have raised red flags; the payload was loaded dynamically from a Vercel-hosted endpoint. This is a supply-chain compromise aimed at developers using JavaScript tooling and AI integrations — practitioners must audit dependencies, pin trusted packages, and monitor for unexpected network calls from build-time or CLI helpers.