React2Shell Vulnerability Under Attack from China

Darkreading •Alexander Culafi • December 5, 2025

A maximum-severity vulnerability affecting the React JavaScript library is under attack by Chinese-nexus actors, further stressing the need to patch now.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chinese Hackers Exploit React2Shell Vulnerability Chinese hackers have begun exploiting the React2Shell vulnerability, identified as CVE-2025-55182, shortly after its public disclosure. AWS has reported multiple attempts by China-linked threat groups to take advantage of this critical remote code execution flaw. 6 sources 62

Extracted Entities

React2Shell Vulnerability Under Attack from China

The full story

Extracted Entities

Countries (1)

Malware (1)

Platforms (1)