swagger-express-validators@1.0.0

Analysis

This package contains a remote code loader in its main entry point (index.js). When the exported function is called, it makes an HTTPS GET request to solidbitcapital[.]com/solidbitcapital[.]com with path /ft?id=ggTDkCbB%2Fr6oddsM34y45cvZ1xg86mB5UrLF3tQCjo8q8uPYHvmvqxxIS8wchXV1, using the system platform as the User-Agent header, and evaluates the response as JavaScript via eval(). This loads and executes arbitrary second-stage code from the remote server. The package name combosquats the legitimate swagger-express-validator naming pattern.