Found the solution in this post: Npm notice created a lockfile as package-lock.json. You should commit this file
Updating
RUN JOBS=MAX npm install --production --unsafe-perm && npm cache clean && rm -rf /tmp/*
to
RUN JOBS=MAX npm install --production --unsafe-perm && npm cache verify && rm -rf /tmp/*
did the trick.