MAL-2026-7149

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/angularos/MAL-2026-7149.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-7149
Aliases
  • GHSA-2xfq-qmmp-p25c
Published
2026-07-07T12:37:05Z
Modified
2026-09-01T11:30:55Z
Summary
Malicious code in angularos (npm)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "RLMA-2026-04869",
            "import_time":  "2026-07-09T09:16:10.15239068Z",
            "modified_time":  "2026-07-07T12:37:05Z",
            "sha256":  "bdb4f83e3a64e38c20adb81de1e20e9857032b335c8206e9d3ad46290016315c",
            "source":  "reversing-labs",
            "versions":  [
                "8.7.6"
            ]
        },
        {
            "id":  "RLUA-2026-06004",
            "import_time":  "2026-09-01T11:17:51.508996078Z",
            "modified_time":  "2026-08-24T16:37:27Z",
            "sha256":  "a7a80907c16bd619500312ca5aa2dd5d8c42634efb36df799bc0288925b66b2e",
            "source":  "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

npm / angularos

Package

Name
angularos
View open source insights on deps.dev
Purl
pkg:npm/angularos

Affected ranges

Affected versions

8.*
8.7.6

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/angularos/MAL-2026-7149.json"