The malicious code in question? An infinite loop that popped up an alert message, immediately showing a new message each time you click OK. Those curious to see the code can see it in action here ...

Here's a code-first intro to the HTML-based JavaScript templating language. JSX is a way to write HTML inside of JavaScript, but it feels more like a way to write JavaScript inside of HTML.