OpenSSF/OSV advisory MAL-2026-7390 confirms this npm version as malicious. Malicious code in revactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in revactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms revactjs@1.1.4 as malicious (MAL-2026-7390): Malicious code in revactjs (npm)