OpenSSF/OSV advisory MAL-2026-7414 confirms this npm version as malicious. Malicious code in rweactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in rweactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms rweactjs@1.1.2 as malicious (MAL-2026-7414): Malicious code in rweactjs (npm)