The hosting provider's compromise allowed attackers to deliver malware through tainted software updates for six months.
Threat actors are exploiting the Metro4Shell React Native vulnerability to deploy malware on Linux and Windows systems.