OpenSSF/OSV advisory MAL-2026-7301 confirms this npm version as malicious. Malicious code in ingularjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in ingularjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms ingularjs@1.1.2 as malicious (MAL-2026-7301): Malicious code in ingularjs (npm)