Your Next JS app is already hacked, you just don't know it yet - Also logs show nothing!

Why 500 Internal Server Errors in Next.js signal Remote Code Execution (RCE) - deserialization executes code before logging/validation, attackers use errors as feedback for full server compromise

BlockHacks