OpenSSF/OSV advisory MAL-2026-7441 confirms this npm version as malicious. Malicious code in wreactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in wreactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms wreactjs@1.1.2 as malicious (MAL-2026-7441): Malicious code in wreactjs (npm)