OpenSSF/OSV advisory MAL-2026-7416 confirms this npm version as malicious. Malicious code in ryeactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in ryeactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms ryeactjs@1.1.2 as malicious (MAL-2026-7416): Malicious code in ryeactjs (npm)