OpenSSF/OSV advisory MAL-2026-7391 confirms this npm version as malicious. Malicious code in rewactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in rewactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms rewactjs@1.1.4 as malicious (MAL-2026-7391): Malicious code in rewactjs (npm)