React2Shell vulnerability in React Server Components (RSC) continues to be heavily exploited by threat actors across multiple sectors. Attackers are leveraging this maximum-severity security flaw to deliver cryptocurrency miners and deploy previously undocumented malware families. New malware discovered includes PeerBlight (Linux backdoor), CowTunnel (reverse proxy tunnel), and a Go-based malware. The exploitation campaign is actively targeting various industries with sophisticated payload delivery mechanisms.