OpenSSF/OSV advisory MAL-2026-7199 confirms this npm version as malicious. Malicious code in anguzarjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in anguzarjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms anguzarjs@1.1.4 as malicious (MAL-2026-7199): Malicious code in anguzarjs (npm)