OpenSSF/OSV advisory MAL-2026-7196 confirms this npm version as malicious. Malicious code in anguwarjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in anguwarjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms anguwarjs@1.1.4 as malicious (MAL-2026-7196): Malicious code in anguwarjs (npm)