OpenSSF/OSV advisory MAL-2026-7442 confirms this npm version as malicious. Malicious code in yreactjs (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in yreactjs (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms yreactjs@1.1.2 as malicious (MAL-2026-7442): Malicious code in yreactjs (npm)