Millions of WordPress sites just got hacked... again

A single PR just hijacked the NPM registry...

Google just casually disrupted the open-source AI narrative…

Google’s AI endgame is here… everything you missed at I/O 2026

Try out Genspark’s all-in-one AI workspace for free - https://www.genspark.ai/?utm_source=yt&utm_campaign=fireship

The JavaScript world just got rocked by a 10.0 critical vulnerability called React2Shell (a.k.a. CVE-2025-55182). Let's find out how this React exploit actually works...

#Coding #programming #javascript #react  

💬 Chat with Me on Discord

https://discord.gg/fireship

🔗 Resources
- https://github.com/facebook/react/security/advisories/GHSA-fv66-9v8q-g76r

🔥 Get More Content - Upgrade to PRO

Upgrade at https://fireship.io/pro
Use code YT25 for 25% off PRO access 

🎨 My Editor Settings

- Atom One Dark 
- vscode-icons
- Fira Code Font

🔖 Topics Covered

- What is React2Shell?
- CVE-2025-55182 explained
- React Flight
- Which React devs are affected?
- What should you do?

React.js shell shocked by 10.0 critical vulnerability…

Millions of WordPress sites just got hacked... again

A single PR just hijacked the NPM registry...

Google just casually disrupted the open-source AI narrative…

Google’s AI endgame is here… everything you missed at I/O 2026