OpenSSF/OSV advisory MAL-2026-7377 confirms this npm version as malicious. Malicious code in reavctjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in reavctjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms reavctjs@8.7.6 as malicious (MAL-2026-7377): Malicious code in reavctjs (npm)