Malicious Package

Overview @angulaar/core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @angulaar/core (npm)

Source: amazon-inspector 42861c7641349d2f58380e4f81b13ad9738dd254f224e9f7f239d9cf940cf792 The package's package.json defines a postinstall lifecycle script that fetches a JavaScript file from a non-publisher host gitflic.ru, proxied via web.archive.org, at the path...

Malicious code in @angulaar/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42861c7641349d2f58380e4f81b13ad9738dd254f224e9f7f239d9cf940cf792 The package's package.json defines a postinstall lifecycle script that fetches a JavaScript file from a non-publisher host gitflic.ru, proxied via...

MAL-2026-17537 Malicious code in @angulaar/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42861c7641349d2f58380e4f81b13ad9738dd254f224e9f7f239d9cf940cf792 The package's package.json defines a postinstall lifecycle script that fetches a JavaScript file from a non-publisher host gitflic.ru, proxied via...