Active React2Shell exploitation uses malicious NGINX configurations to hijack web traffic, targeting Baota panels, Asian TLDs, and government domains.

Hijacking web traffic is an old tactic for threat actors. In fact David Shipley, head of Canadian security awareness training ...

I have zero programming experience. But after a few minor setbacks, I was able to build a custom website in no time.

Active attacks exploit Metro4Shell (CVE-2025-11953) in React Native CLI to execute commands and deploy Rust malware.