OpenSSF/OSV advisory MAL-2026-7212 confirms this npm version as malicious. Malicious code in atgularjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in atgularjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms atgularjs@8.7.6 as malicious (MAL-2026-7212): Malicious code in atgularjs (npm)