Why does my Debian VPS running Next.js keep getting infected with crypto mining malware? [closed]

I have a Debian VPS running several services including Nginx and DirectAdmin.
One of the applications is a Next.js website. The project uses the following packages:

next 15.5.15

react 19.2.5

react-dom 19.2.5

next-intl

zustand

html2ca… Continue reading Why does my Debian VPS running Next.js keep getting infected with crypto mining malware? [closed]