OpenSSF/OSV advisory MAL-2026-7323 confirms this npm version as malicious. Malicious code in mreactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in mreactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms mreactjs@1.1.4 as malicious (MAL-2026-7323): Malicious code in mreactjs (npm)