ILOVEPOOP Toolkit Exploiting React2Shell Vulnerability to Deploy Malicious Payload

Back Cybersecuritynews

ILOVEPOOP Toolkit Exploiting React2Shell Vulnerability to Deploy Malicious Payload

Cybersecuritynews • February 10, 2026

Share: View original

By manipulating the serialization process of server components, intruders can inject unauthorized commands directly into the application's runtime.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ILOVEPOOP Toolkit Targets React2Shell Vulnerability for Exploitation The ILOVEPOOP toolkit is exploiting the React2Shell vulnerability (CVE-2025-55182), which affects .js and React Server Components. This critical flaw allows unauthenticated attackers to execute arbitrary code by manipulating the serialization process of server components. Following its public disclosure on December 4, 2025, threat actors initiated exploitation attempts within 20 hours against internet-facing systems. 3 sources 24

Extracted Entities

Attack Types (1)

Malware (1)

Tools (1)

Ilovepoop Toolkit