Malicious code in angulazjs (npm)

The angulazjs npm package at version 8.7.6 has been identified as containing malicious code. This is cataloged under the identifier MAL-2026-7162 and has an alias GHSA-vwv5-369c-5hq2. There is no detailed technical description or CVSS score available, and no known exploits in the wild have been reported. The threat is related to the presence of malicious content within the package rather than a specific software defect.

The presence of malicious code in the angulazjs package can lead to compromise of systems that install and run this version of the package. Specific impacts are not detailed, but malicious packages typically risk unauthorized code execution, data theft, or system manipulation.

No patch or remediation information is provided. Users should avoid using angulazjs version 8.7.6 and verify the integrity and source of npm packages before installation. Consider using trusted package versions or alternatives. Monitor vendor advisories or npm security notices for updates or removal of the malicious package.