Recent versions of the widely-installed ngx-bootstrap Angular module appear to contain a serious malware payload.

Discussion here suggests this may be limited to only a few recent versions, but this is still a nasty exploit:

https://github.com/valor-software/ngx-bootstrap/issues/6776