From RSC to XMRig: Anatomy of a 28-Day Next.js Compromise8 February 2026·2782 words·14 mins· loading · loading Security Research Next.js CVE-2025-66478 Incident Response Threat Hunting Linux XMRig Malware Analysis SOC