Malicious Package

Overview @fmr-ap153177/apex-kit-icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @fmr-ap153177/apex-kit-icons (npm)

Source: amazon-inspector ff7b14a37bdf740ac9f0e4c8978c2c577d39f04d7b897a5d698cbb220ecf3c9a package.json declares the sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.1.tgz instead of a registry version range. On npm install, npm...

MAL-2026-18279 Malicious code in @fmr-ap153177/apex-kit-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7b14a37bdf740ac9f0e4c8978c2c577d39f04d7b897a5d698cbb220ecf3c9a package.json declares the sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.1.tgz...

Malicious code in @fmr-ap153177/apex-kit-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7b14a37bdf740ac9f0e4c8978c2c577d39f04d7b897a5d698cbb220ecf3c9a package.json declares the sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.1.tgz...

Malicious code in @fmr-ap149494/apex-base-component (npm)

Source: ossf-package-analysis e3505d2eebf31d1938862b6f6744d353fadaf980b9a27860f2a7c36d863828b9 The OpenSSF Package Analysis project identified '@fmr-ap149494/apex-base-component' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated wit...

MAL-2026-17929 Malicious code in @fmr-ap149494/apex-base-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e582d9d611f75576135d06bf83cf71b60a58fbbf475ba61e656bf190a73c5546 The package ships only an empty stub index.js exports and a manifest whose sole dependency, ltidisafe, is declared as a bare HTTPS tarball URL...

Malicious code in @fmr-ap149494/apex-base-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e582d9d611f75576135d06bf83cf71b60a58fbbf475ba61e656bf190a73c5546 The package ships only an empty stub index.js exports and a manifest whose sole dependency, ltidisafe, is declared as a bare HTTPS tarball URL...

Malicious Package

Overview @fmr-ap149494/apex-base-component is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MINI-9FMR-X844-PPFR

Bulletin has no description...

MINI-Q99H-FMRR-HVC2

Bulletin has no description...

Malicious code in @fmr-pr103625/apex-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 87f7d6eefb4242b16b30fbedd12103828145a5d82610917904a48a2ee5b1f063 The OpenSSF Package Analysis project identified '@fmr-pr103625/apex-core' @ 1.999.2 npm as malicious. It is considered malicious because: - The...