Docker Container Malware Issue Resolution

We did some additional investigation, and we identified unauthorized and malicious activity originating from one of your Docker containers (emblazer-ai-frontend-1), which runs a [login to view URL] frontend service. The application running inside this container is spawning unauthorized Linux executables (with crypto-mining malware behavior), from temporary locations such as /tmp, /var/tmp, and /dev/shm. These processes are consuming extremely high CPU and memory resources on your server. The processes were launched by the Node.js/Next.js runtime inside the container, indicating that the activity originated from within the application environment inside the container. To prevent further malicious activity on your server the affected Docker container has now been stopped. We strongly recommend against restarting the container in its current state, because the malicious activity will likely reappear again. Instead, you should proceed with rebuilding your Docker image from a clean source, auditing the application code and its dependencies, and make sure they are up to date and do not contain any vulnerabilities before redeploying the container again. Please let us know if you need any further information

Projekt-ID: 40235490