It has been seen spreading cryptojacking malware and in attempts to steal cloud credentials from compromised machines.

It's so bad that it has a maximum severity rating on the CVE database. Fortunately, React's developers created a fix almost ...

Cloudflare has blamed today's outage on the emergency patching of a critical React remote code execution vulnerability, which is now actively exploited in attacks.

Multiple China-linked threat actors began exploiting the React2Shell vulnerability (CVE-2025-55182) affecting React and ...