How an Unpatched Zero-Day in a React Library Exposed Corporate Data, Employee Credentials, and Financial Assets28 December 2025·10 minsSecurity Research XSS Supply Chain Zero-Day Credential Harvesting Red Teaming