React2Shell, npm Malware, and Your Vibe-Coded App

A critical remote-code-execution bug in React Server Components got a name this week: React2Shell. It reaches into Next.js, the framework behind a huge share of AI-generated apps. At the same time, a