A new postinstall script was detected in version 0.12.0-pre of the package forms-angular.

Script content:

if [ -d 'node_modules/bower' ]; then bower install --config.directory=node_modules --production [email protected] bootstrap-2-3-2=git://github.com/twbs/bootstrap.git#v2.3.2 bootstrap-3-3-7=git://github.com/twbs/bootstrap.git#v3.3.7; fi

see npm documentation on package scripts for more details.
and the detector. to understand why this script might be dangerous.
to get the alert only for dangerous scripts, please visitthe telegram
This could be a security risk. Please investigate.