Hackers exploit a critical React JavaScript vulnerability, CVE-2025-55182, to deploy crypto wallet drainers on legitimate websites ...

React vulnerability CVE-2025-55182 exploited by crypto-drainers to execute remote code and steal funds from affected websites ...

Hackers are exploiting a vulnerability in React to inject wallet-draining malware into cryptocurrency websites.

The JavaScript programming library React and certain apps created with it are vulnerable. Security updates are available for download.

Cloudflare has blamed today's outage on the emergency patching of a critical React remote code execution vulnerability, which is now actively exploited in attacks.