Next.js news and engineering summaries

Microsoft warns of a phishing campaign targeting developers with fake Next.js job assessments. The attack uses VS Code workspace automation, npm build tasks, and backend scripts to install backdoors and exfiltrate credentials. Attackers leverage social engineering to compromise developer machines, gaining access to cloud secrets, tokens, and source code.

A recent study on AI coding agents working with Next.js 16 reveals that passive context in an AGENTS.md file significantly outperforms active skill-based retrieval. While skills achieved only a 79% pass rate with fragile instructions and often failed to trigger, a compressed 8KB documentation index embedded in the project root reached a 100% pass rate. This suggests that eliminating the agent's decision-making process regarding when to look up documentation leads to more reliable code generation, particularly for new APIs like 'use cache' or 'connection()' that are not yet included in model training data. The research advocates for retrieval-led reasoning over pre-training-led reasoning, using tools like the @next/codemod CLI to maintain version-matched local documentation.

OpenStock is a free, open-source stock-market platform from Open Dev Society, offering watchlists, alerts, company insights, charts, news, sentiment data, and personalized email summaries. Built with Next.js, TypeScript, MongoDB, Better Auth, Finnhub, TradingView, Inngest, and optional Gemini, it supports 30+ exchanges. AGPL-3.0 requires source disclosure for modified or deployed versions.

Next.js is a React Framework for building full-stack web applications. It extends modern React capabilities and integrates Rust-based JavaScript tooling to deliver fast builds. Used by major companies, it combines frontend and backend development with a mature ecosystem, comprehensive documentation, and active community support.

An experienced developer explains their process for learning unfamiliar codebases using Next.js and its Rust-based bundler, Turbopack, as a case study. The approach emphasizes debugging specific issues, utilizing custom visualization tools, and understanding core architectural components like ValueCells (Vc) rather than trying to comprehend the entire project at once.

WaveDigger is an open-source Next.js and TypeScript application that locates Wi-Fi access points by BSSID and LTE/5G NR cell towers using Apple’s WLOC API. It provides validated searches, interactive deck.gl maps, history, and responsive design, relying on reverse-engineered protobuf definitions and coordinate conversion from apple-corelocation-experiments.

This guide demonstrates building a structured, multi-agent research assistant using LangChain's Deep Agents and CopilotKit. It features a Python FastAPI backend for planning and web searching via Tavily, and a Next.js frontend that streams the agent's internal state—including checklists, files, and sources—to the UI in real-time for better visibility and trust.

@eigenpal/docx-js-editor is an open-source, client-side WYSIWYG editor for React, allowing users to open, edit, and save .docx files directly in the browser. It features Microsoft Word fidelity, a plugin system, and zero server dependencies. Integration requires dynamic imports for Next.js and supports formatting, tables, and images under the MIT license.

SharePad is an open-source, no-signup service for sharing multi-page Markdown notebooks through stable view and secret edit links. Built with Next.js, Supabase Postgres, Cloudflare R2, and React Markdown, it offers versioning, images, access controls, expiry, comments, and PDF export. Token-based ownership, sanitization, rate limiting, and deployment guidance address security and operational concerns.

A Frontend Challenge submission showcasing Ichiraku Ramen, an anime-inspired restaurant landing page designed to evoke warmth, comfort, and nostalgia from Naruto. Built with Next.js, React, and Tailwind CSS, with v0.dev supporting the design, it uses atmospheric visual details and is deployed on Vercel from GitHub. A Naruto easter egg is planned.

I built Moodify, an AI-powered playlist generator using Claude and the Spotify API. Users describe a mood, and Claude creates a tailored 50-song playlist. Challenges included complex OAuth redirects with NextAuth, handling Spotify's API deprecations, and optimizing Claude's prompts to prevent hallucinations. The project uses Next.js, TypeScript, Supabase, and SSE for a responsive streaming UI.

The user built 'Moodify,' an AI-driven playlist generator using Next.js, Claude API, and the Spotify API. The system translates mood descriptions into 50-track Spotify playlists. Key technical challenges included circumventing NextAuth URL normalization, handling Spotify's deprecated endpoints, and refining Claude's prompt engineering to prevent hallucinations and improve musical accuracy via SSE streaming.

HN Digest is a personalized newsletter builder for Hacker News that allows users to curate content sections via a conversational AI interface. Users can schedule custom email digests using their own Resend API keys. The application uses Next.js, CopilotKit for LLM-driven editing, Neon for storage, and Upstash QStash for per-user scheduling.

This guide demonstrates how to build AI-integrated applications without complex orchestration frameworks like LangGraph. Using CopilotKit, developers can create assistants that understand app state and execute actions through simple hooks like useAgentContext and useFrontendTool. It also covers Generative UI for rendering React components directly within the AI chat interface.

A software engineer shares a new open-source, AI-assisted tool built with Next.js, React, and TypeScript to help developers prepare for interviews by focusing on pattern recognition rather than rote memorization. The platform provides flashcards, quizzes, and system design templates to help users master algorithmic patterns and architectural tradeoffs for more effective interview practice.

The author developed BloggerHelper, an Agentic Content Engine using Next.js 15, Gemini 3.1 Pro, and Discord Webhooks. Designed to repurpose blog posts into social media campaigns, it emphasizes a Human-in-the-Loop (HITL) workflow, ensuring human approval before deployment. The tool features strict JSON enforcement to prevent hallucinations and a columnar UI for easier content auditing.

Pilot is an Instagram automation and deal management platform designed for creators, founders, and small teams to transform social media interactions into structured sales workflows. Built for the DEV Worldwide Show and Tell Challenge, it addresses the common problem of lost leads and manual overhead in Instagram DMs and comments. The platform features automated replies, lead capture, and comprehensive deal tracking. Technically, Pilot utilizes Next.js with TypeScript, PostgreSQL via Drizzle ORM, and the Instagram API. It leverages Inngest for event-driven workflows and the Vercel AI SDK with Google AI for personalized AI assistance that uses real business data. This robust stack creates a scalable system for managing a sales pipeline directly within the Instagram ecosystem.

Microsoft Defender Experts uncovered a malicious campaign targeting developers through fake Next.js repositories and job-themed lures. The attackers use Visual Studio Code workspace automation and trojanized assets to execute in-memory JavaScript. This multi-stage threat facilitates command-and-control, environment variable exfiltration, and persistent access to sensitive developer infrastructure and source code.

ChemistryCheck is an innovative AI-powered tool developed for the DEV's Worldwide Show and Tell Challenge. The application analyzes chat exports from platforms like WhatsApp, Telegram, and Instagram to uncover deep communication patterns. By examining metrics such as response delays, message volume, and effort imbalance, it transforms subjective emotional experiences into objective data. Built using a modern tech stack including Next.js 16, React 19, and TypeScript, the project utilizes Google Gemini for generating nuanced insights and Recharts for visualization. It aims to help users identify relationship red flags through technical clarity rather than emotional excuses, providing a shareable dashboard for transparency.

The user discusses a rapid development approach to side projects, utilizing Vercel to ship multiple minimalist and experimental web applications. These projects include Digital Guilt Trap, The Checker, Quantum Weather, and a purposely Useless Website. Unlike many developers who wait for a flawless concept, the author emphasizes the importance of momentum over perfection. Each project served as a learning tool for production realities, highlighting the difficulties of mobile layouts, the deceptive nature of user experience, and the advantages of frequent code deployment. By shipping imperfect products, developers can gain practical insights into frontend development and backend integration that theoretical planning cannot provide. The core message focuses on the idea that committing code is more valuable than overthinking a project, as the act of shipping consistently builds a professional portfolio and hones technical skills.