OpenSSF/OSV advisory MAL-2026-7197 confirms this npm version as malicious. Malicious code in anguxarjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in anguxarjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms anguxarjs@1.1.4 as malicious (MAL-2026-7197): Malicious code in anguxarjs (npm)