pkgscan.dev npm package scan report

Is @fmr-ap149494/apex-base-component 0.0.0-stage safe?

pkgscan.dev flagged @fmr-ap149494/apex-base-component 0.0.0-stage as malicious on 2026-11-10: it matches published malware advisory MAL-2026-17929. Do not install this npm package. If it is already installed, remove it and rotate any credentials or tokens it could have read.

Malware advisory match Status: completed

Full findings from every engine are public — no account required.

Scan statuscompleted
Engines6 engines reported
Engine coverage6 of 6 engines reported.
Malware flags0 engines flagged this artifact as malicious
Malware advisoriesMAL-2026-17929
Issues reported1 engine reported security issues (for example known vulnerabilities)
First seen2026-11-10
Analyzed2026-11-10
SHA-256d48ce71e4ac281209b10701eeb0c0d5a2d9d934c45626f18a021229649ab0718
Package URLpkg:npm/@fmr-ap149494/apex-base-component@0.0.0-stage

Engines

Scanned versions

Open the full interactive report on pkgscan.dev →

pkgscan.dev is built by Yeeth Security. Read our malware research on VS Code extensions, npm, and PyPI.