Active React2Shell exploitation uses malicious NGINX configurations to hijack web traffic, targeting Baota panels, Asian TLDs, and government domains.
Hijacking web traffic is an old tactic for threat actors. In fact David Shipley, head of Canadian security awareness training ...
The majority of the 1.4 million React2Shell exploitation attempts GreyNoise saw in a week deployed cryptominers and reverse ...
The Register on MSN
Critical React Native Metro dev server bug under attack as researchers scream into the void
Too slow react-ion time Baddies are exploiting a critical bug in React Native's Metro development server to deliver malware ...
Active attacks exploit Metro4Shell (CVE-2025-11953) in React Native CLI to execute commands and deploy Rust malware.
Hackers are targeting developers by exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native ...
Strip the types and hotwire the HTML—and triple check your package security while you are at it. JavaScript in 2026 is just ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results