OpenSSF/OSV advisory MAL-2026-7413 confirms this npm version as malicious. Malicious code in rveactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in rveactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms rveactjs@1.1.4 as malicious (MAL-2026-7413): Malicious code in rveactjs (npm)