Threats Tagged 'mal-2026-11065'

The npm package 'swiper_angular' version 5.9999.0 is identified as malicious due to embedded code that executes automatically during installation. This code collects detailed host and network information, including hostname, user info, working directory, package and git details, DNS and hosts file contents, and external IP addresses. The collected data is sent to a hardcoded external domain associated with malicious activity. The behavior targets a specific organization (tbibank) without user consent. No official patch or remediation guidance is currently available.