OpenSSF/OSV advisory MAL-2026-7373 confirms this npm version as malicious. Malicious code in reamctjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in reamctjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms reamctjs@8.7.6 as malicious (MAL-2026-7373): Malicious code in reamctjs (npm)