React2Shell Exploits Flood the Internet as Attacks Continue

A critical RCE vulnerability identified as CVE-2025-55182 (nicknamed "React2Shell") in React Server Components has triggered a flood of public PoC exploits—many ineffective or AI-generated, but some validated and dangerous (including ones that deploy the Godzilla web shell). Researchers report active exploitation in the wild by various actors (including China-nexus groups), use of cryptominers, infostealers and backdoors, and growing efforts to bypass or evade WAF protections.