Your Next JS app is already hacked, you just don't know it yet - Also logs show nothing!
audits.blockhacks.io
Why 500 Internal Server Errors in Next.js signal Remote Code Execution (RCE) - deserialization executes code before logging/validation, attackers use errors as feedback for full server compromise