ap3-foundations-ui

Details

**Severity:** Critical

**Affected versions:** `= 99.0.1`

## Source: amazon-inspector (7469eefaab624821647b4e412c4ceac1f422d4857b8484767041fdc355398477)
The package's preinstall hook runs index.js, which collects installer host identifiers (os.hostname(), os.userInfo().username, os.homedir(), process.cwd(), os.platform(), os.arch(), and process.env.CI) and POSTs them as JSON to a hardcoded third-party collector at https://webhook.site/7dbd5e4e-3156-427f-b383-30c14d845587. The behavior fires automatically on `npm install` without caller consent. The package is published at version 99.0.1 under a name consistent with an internal/private namespace, matching the shape of a dependency-confusion beacon used to confirm successful name hijack in a target environment. The exfiltrated fields identify the installing host, user account, working directory, and CI status — information useful for targeting follow-on attacks against the organization whose build pulled the package.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/ffeab8f8e90c271d922729dade9fd76cd7ac1da2/osv/malicious/npm/ap3-foundations-ui/MAL-2026-17806.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/ffeab8f8e90c271d922729dade9fd76cd7ac1da2/osv/malicious/npm/ap3-foundations-ui/MAL-2026-17806.json
- https://www.npmjs.com/package/ap3-foundations-ui/v/99.0.1
- https://github.com/ossf/malicious-packages/blob/1bf88e90e630272e14db23073a597fb79e3bc6ea/osv/malicious/npm/ap3-foundations-ui/MAL-2026-17806.json
- https://www.npmjs.com/package/ap3-foundations-ui
- https://github.com/advisories/GHSA-4r79-x33v-862h

Compromised versions (1)

• = 99.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.