A newly discovered loophole in one of the web’s most used development tools is giving hackers a new way to drain cryptocurrency wallets. Cybersecurity researchersA newly discovered loophole in one of the web’s most used development tools is giving hackers a new way to drain cryptocurrency wallets. Cybersecurity researchers

Second JavaScript Exploit in Four Months Exposes Crypto Sites to Wallet Drainers

A newly discovered loophole in one of the web’s most used development tools is giving hackers a new way to drain cryptocurrency wallets.

Cybersecurity researchers have reported a surge in malicious code uploaded to legitimate websites through a vulnerability in the popular JavaScript library React — a tool used by countless crypto platforms for their front-end systems.

Crypto Drainer Attacks Surge via React Flaw

According to Security Alliance (SEAL), a nonprofit cybersecurity organization, criminals are actively exploiting a recently disclosed React vulnerability labeled CVE-2025-55182.

“We are observing a big uptick in drainers uploaded to legitimate crypto websites through exploitation of the recent React CVE,” SEAL stated on X (formerly Twitter). “All websites should review front-end code for any suspicious assets NOW.

  • HP CEO “Exposes” Ink Cartridge Vulnerability Triggering Legal Storm
  • Exness Rewards Up to $10,000 in New Bug Bounty Program
  • How to Increase Business Security Using a Honeypot

The flaw enables unauthenticated remote code execution, allowing attackers to secretly inject wallet-draining scripts into websites. The malicious code tricks users into approving fake transactions via deceptive pop-ups or reward prompts.

Read more: Hackers Exploit JavaScript Accounts in Massive Crypto Attack Reportedly Affecting 1B+ Downloads

SEAL cautioned that some compromised sites may be unexpectedly flagged as phishing risks. The organization advised web administrators to conduct immediate security audits to catch any injected assets or obfuscated JavaScript.

"If your project is getting blocked, that may be the reason. Please review your code first before requesting phishing page warning removal. The attack is targeting not only Web3 protocols! All websites are at risk. Users should exercise caution when signing ANY permit signature."

Phishing Flags and Hidden Drainers

The group warned that developers who find their projects mistakenly blocked as phishing pages should inspect their code first before appealing the warning.

The React development team confirmed on December 3 that it had patched the vulnerability after white hat hacker Lachlan Davidson privately reported the issue.

The fix affects the react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack packages. The team urged all developers using these components to update immediately.

Piyasa Fırsatı
MetaDOS Logosu
MetaDOS Fiyatı(SECOND)
$0.0000038
$0.0000038$0.0000038
0.00%
USD
MetaDOS (SECOND) Canlı Fiyat Grafiği
Sorumluluk Reddi: Bu sitede yeniden yayınlanan makaleler, halka açık platformlardan alınmıştır ve yalnızca bilgilendirme amaçlıdır. MEXC'nin görüşlerini yansıtmayabilir. Tüm hakları telif sahiplerine aittir. Herhangi bir içeriğin üçüncü taraf haklarını ihlal ettiğini düşünüyorsanız, kaldırılması için lütfen [email protected] ile iletişime geçin. MEXC, içeriğin doğruluğu, eksiksizliği veya güncelliği konusunda hiçbir garanti vermez ve sağlanan bilgilere dayalı olarak alınan herhangi bir eylemden sorumlu değildir. İçerik, finansal, yasal veya diğer profesyonel tavsiye niteliğinde değildir ve MEXC tarafından bir tavsiye veya onay olarak değerlendirilmemelidir.

Ayrıca Şunları da Beğenebilirsiniz

Horror Thriller ‘Bring Her Back’ Gets HBO Max Premiere Date

Horror Thriller ‘Bring Her Back’ Gets HBO Max Premiere Date

The post Horror Thriller ‘Bring Her Back’ Gets HBO Max Premiere Date appeared on BitcoinEthereumNews.com. Jonah Wren Phillips in “Bring Her Back.” A24 Bring Her Back, a new A24 horror movie from the filmmakers of the smash hit Talk to Me, is coming soon to HBO Max. Bring Her Back opened in theaters on May 30 before debuting on digital streaming via premium video on demand on July 1. The official logline for Bring Her Back reads, “A brother and sister uncover a terrifying ritual at the secluded home of their new foster mother.” Forbes‘South Park’ Season 27 Updated Release Schedule: When Do New Episodes Come Out?By Tim Lammers Directed by twin brothers Danny Philippou and Michael Philippou, Bring Her Back stars Billy Barratt, Sora Wong, Jonah Wren Philips, Sally–Anne Upton, Stephen Philips, Mischa Heywood and Sally Hawkins. Warner Bros. Discovery announced on Wednesday that Bring Her Back will arrive on streaming on HBO Max on Friday, Oct. 3, and on HBO linear on Saturday, Oct. 4, at 8 p.m. ET. Prior to the debut of Bring Her Back on HBO on Oct. 4, the cable outlet will air the Philippou brothers’ 2022 horror hit Talk to Me. ForbesHit Horror Thriller ’28 Years Later’ Is New On Netflix This WeekBy Tim Lammers For viewers who don’t have HBO Max, the streaming platform offers three tiers: The ad-based tier costs $9.99 per month, while an ad-free tier is $16.99 per month. Additionally, an ad-free tier with 4K Ultra HD programming costs $20.99 per month. The Success Of ‘Talk To Me’ Weighed On The Minds Of Philippou Brothers While Making ‘Bring Her Back’ During the film’s theatrical run, Bring Her Back earned $19.3 million domestically and nearly $19.8 million internationally for a worldwide box office tally of $39.1 million. Bring Her Back had a production budget of $17 million before prints and advertising, according to The Numbers.…
Paylaş
BitcoinEthereumNews2025/09/18 09:23
Solana Faces Massive DDoS Attack Without Performance Issues

Solana Faces Massive DDoS Attack Without Performance Issues

Solana successfully countered a major DDoS attack without affecting users. The network maintained transaction confirmation times around 450 milliseconds. Continue
Paylaş
Coinstats2025/12/17 13:08
XRP Price Steady Near $2 Amid Chart Compression and Growing ETF Inflows

XRP Price Steady Near $2 Amid Chart Compression and Growing ETF Inflows

XRP price has steadied near $2, with technical charts indicating momentum compression and strong institutional demand via ETF inflows. This convergence suggests
Paylaş
CoinoTag2025/12/17 13:33