discovered 2026-03-16
react-refresh-update is identified in the SafeDep analysis "Malicious npm Package react-refresh-update Drops Cross-Platform Trojan on Developer Machines". >