Hackers are targeting developers by exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native to deliver malicious payloads for Windows and Linux.
Attackers have exploited Hugging Face repositories to distribute Android RAT malware disguised as a security app, hosting thousands of malicious files on the trusted AI platform.