OpenSSF/OSV advisory MAL-2026-7194 confirms this npm version as malicious. Malicious code in anguuarjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in anguuarjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms anguuarjs@1.1.4 as malicious (MAL-2026-7194): Malicious code in anguuarjs (npm)