OpenSSF/OSV advisory MAL-2026-7356 confirms this npm version as malicious. Malicious code in rceactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in rceactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms rceactjs@1.1.2 as malicious (MAL-2026-7356): Malicious code in rceactjs (npm)