OpenSSF/OSV advisory MAL-2026-7198 confirms this npm version as malicious. Malicious code in anguyarjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in anguyarjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms anguyarjs@1.1.4 as malicious (MAL-2026-7198): Malicious code in anguyarjs (npm)