Security News Hackers Exploit Metro4Shell RCE Flaw in React Native CLI npm Package TheHackerNews Daniel Bender 03 Feb 2026 Active attacks exploit Metro4Shell (CVE-2025-11953) in React Native CLI to execute commands and deploy Rust malware.