SEAL Warning: React vulnerability exploited to inject encrypted wallet emptying program; attack activity on the rise.

The cybersecurity non-profit organization Security Alliance (SEAL) reports a significant increase in attacks recently, as hackers have exploited a security vulnerability in the open-source JavaScript library React to inject crypto drainers into websites. The React team disclosed on December 3rd that a white-hat hacker, Lachlan Davidson, discovered a vulnerability in their software that allows attackers to remotely execute code without authentication, thus injecting and running malicious code. SEAL also warns that this attack targets not only Web3 projects but all websites, urging users to exercise extreme caution when signing any permit authorizations. (Cointelegraph)