OpenSSF/OSV advisory MAL-2026-7200 confirms this npm version as malicious. Malicious code in angvlarjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in angvlarjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms angvlarjs@8.7.6 as malicious (MAL-2026-7200): Malicious code in angvlarjs (npm)