Hackers Exploit Next.js React2Shell Flaw to Steal Credentials From 766 Hosts in 24 Hours