OpenSSF/OSV advisory MAL-2026-7415 confirms this npm version as malicious. Malicious code in rxeactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in rxeactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms rxeactjs@8.7.6 as malicious (MAL-2026-7415): Malicious code in rxeactjs (npm)