ILOVEPOOP Toolkit Targets React2Shell Vulnerability for Exploitation

The ILOVEPOOP toolkit is exploiting the React2Shell vulnerability (CVE-2025-55182), which affects .js and React Server Components. This critical flaw allows unauthenticated attackers to execute arbitrary code by manipulating the serialization process of server components. Following its public disclosure on December 4, 2025, threat actors initiated exploitation attempts within 20 hours against internet-facing systems.