OpenSSF/OSV advisory MAL-2026-7195 confirms this npm version as malicious. Malicious code in anguvarjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in anguvarjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms anguvarjs@1.1.4 as malicious (MAL-2026-7195): Malicious code in anguvarjs (npm)