OpenSSF/OSV advisory MAL-2026-7370 confirms this npm version as malicious. Malicious code in reacytjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in reacytjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms reacytjs@8.7.6 as malicious (MAL-2026-7370): Malicious code in reacytjs (npm)