OpenSSF/OSV advisory MAL-2026-7209 confirms this npm version as malicious. Malicious code in areactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in areactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms areactjs@1.1.1 as malicious (MAL-2026-7209): Malicious code in areactjs (npm)