OpenSSF/OSV advisory MAL-2026-7201 confirms this npm version as malicious. Malicious code in angwlarjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in angwlarjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms angwlarjs@8.7.6 as malicious (MAL-2026-7201): Malicious code in angwlarjs (npm)