An NPR investigation has identified a web of more than 30 medical practices and compounding pharmacies in over a dozen states that have made claims about thymosin alpha-1 online and on social media.