The crypto industry is grappling with several cybersecurity threats this week. A critical vulnerability in the React JavaScript library has been exploited to inject wallet-draining code onto crypto websites, leading to significant user fund losses. KuCoin has advised its users to monitor for suspicious activity. In another incident, the ShinyHunters group claimed responsibility for a ransomware attack that compromised 201 million Pornhub premium account records. Additionally, SantaStealer malware is being marketed as a Crime-as-a-Service (CaaS) product on hacker forums. Amazon has also issued warnings about a hidden crypto mining campaign targeting AWS. Furthermore, a Bitcoin investor was defrauded of his savings through an AI-powered romance scam.