{"id":"MAL-2026-7149","summary":"Malicious code in angularos (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["GHSA-2xfq-qmmp-p25c"],"modified":"2026-09-01T11:30:55.296629536Z","published":"2026-07-07T12:37:05Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2026-04869","import_time":"2026-07-09T09:16:10.15239068Z","modified_time":"2026-07-07T12:37:05Z","sha256":"bdb4f83e3a64e38c20adb81de1e20e9857032b335c8206e9d3ad46290016315c","source":"reversing-labs","versions":["8.7.6"]},{"id":"RLUA-2026-06004","import_time":"2026-09-01T11:17:51.508996078Z","modified_time":"2026-08-24T16:37:27Z","sha256":"a7a80907c16bd619500312ca5aa2dd5d8c42634efb36df799bc0288925b66b2e","source":"reversing-labs"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2xfq-qmmp-p25c"}],"affected":[{"package":{"name":"angularos","ecosystem":"npm","purl":"pkg:npm/angularos"},"versions":["8.7.6"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/angularos/MAL-2026-7149.json"}}],"schema_version":"1.9.0","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}