A critical vulnerability affecting the popular open source JavaScript library React is under attack — by none other by Chinese ...