The report suggests compounders may be using illegally imported APIs made in unregistered overseas facilities.