The Register on MSN
Critical React Native Metro dev server bug under attack as researchers scream into the void
Too slow react-ion time Baddies are exploiting a critical bug in React Native's Metro development server to deliver malware ...
Threat actors are exploiting the Metro4Shell React Native vulnerability to deploy malware on Linux and Windows systems.
Active attacks exploit Metro4Shell (CVE-2025-11953) in React Native CLI to execute commands and deploy Rust malware.
Hackers are targeting developers by exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native to deliver malicious payloads for Windows and Linux.
The bug exposes the Metro development server to remote attacks, allowing arbitrary OS command execution on developer systems before a fix in version 20.0.0. A critical remote-code execution (RCE) flaw ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results