CERT24MAL-2026-17806 — Malicious code in ap3-foundations-ui (npm)Loading data…
CERT24Threat Observatory
Period

MAL-2026-17806 — Malicious code in ap3-foundations-ui (npm)

The ap3-foundations-ui package describes itself as a security research proof of concept for dependency confusion. Its npm preinstall hook runs index.js and sends installer-host identifiers to a hardcoded third-party collector at https://webhook.site/7dbd5e4e-3156-427f-b383-30c14d845587. It was published by the npm account vikkuthetester22 on 2026-10-12.

← Back to intelligence

MAL-2026-17806 — Malicious code in ap3-foundations-ui (npm)

The ap3-foundations-ui package describes itself as a security research proof of concept for dependency confusion. Its npm preinstall hook runs index.js and sends installer-host identifiers to a hardcoded third-party collector at https://webhook.site/7dbd5e4e-3156-427f-b383-30c14d845587. It was published by the npm account vikkuthetester22 on 2026-10-12.