A recently discovered security issue in React code has been exploited to inject harmful wallet-draining scripts onto cryptocurrency websites, according to Security Alliance (SEAL).