OpenSSF/OSV advisory MAL-2026-7358 confirms this npm version as malicious. Malicious code in reaactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in reaactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms reaactjs@1.1.2 as malicious (MAL-2026-7358): Malicious code in reaactjs (npm)