
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@socketsupply/next-native
Advanced tools
Next-Natve is a project that makes it possible to build native, cross-platform apps using the Next.js framework.
[!WARNING] This is pre-release software! It requires the
devbranch of thesocket-runtime. It's only ready for early adopters and potential contributors
During pre-release...
# from the socket repo
npm run relink
# from the repo you are working on
npm link @socketsupply/socket
Use as a command line tool to initialize an existing project as a native app.
$ npm i @socketsupply/next-native -g
$ next-native -h
next-native v0.5.4 (97fa3f7c)
usage:
next-native [SUBCOMMAND] [options] [<project-dir>]
next-native [SUBCOMMAND] -h
subcommands:
build build project
list-devices get the list of connected devices
init create a new project (in the current directory)
install-app install app to the device
print-build-dir print build path to stdout
run run application
env print relavent environment variables
setup install build dependencies
general options:
-h, --help print help message
--prefix print install path
-v, --version print program version
Use as a module inside to create a nextjs server inside a service worker. See this example to get a quick demo up and running.
$ npm i @socketsupply/next-native -S
import createServer from 'npm:@socketsupply/next-native'
const server = await createServer()
console.log('Created Server')
server.start().then(() => {
console.log('Started Server')
})
FAQs
Run Next.js Applications on the Socket Runtime
We found that @socketsupply/next-native demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.