Malicious code in angylarjs (npm)

The angylarjs package on npm was found to contain malicious code in versions 1.1.4 and 8.7.6. This is identified as a malicious package incident rather than a traditional software vulnerability. There is no detailed technical information about the nature of the malicious code or its behavior. No known exploits in the wild have been reported. No patch or remediation information is provided.

Users who install or use the affected versions of angylarjs may be exposed to malicious code execution or other malicious activities embedded in the package. The exact impact is not detailed, but malicious packages typically risk compromise of the user's environment or data.

No official patch or remediation guidance is provided. Users should avoid using the affected versions 1.1.4 and 8.7.6 of angylarjs. It is recommended to verify package integrity and source before installation and consider removing or replacing the package if already in use.