OpenSSF/OSV advisory MAL-2026-7202 confirms this npm version as malicious. Malicious code in angxlarjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in angxlarjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms angxlarjs@8.7.6 as malicious (MAL-2026-7202): Malicious code in angxlarjs (npm)