React2Shell (CVE-2025-55182): The Log4Shell moment for the frontend ecosystem, and nobody is ready

Help me understand what this piece of malware is targeting!

Investigating a backdoored PyPI package targeting FastAPI applications