
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
nextjs-claude-code
Advanced tools
Spec-Driven AI Development workflow for Next.js & React with Claude Code
Spec-Driven AI Development — define and build in just two commands.
Define your feature. Claude builds exactly what the spec says — every change traced back to a requirement.
/spec auth "email login" → spec.md + design.md
/dev auth → plan → implement → verify → done
/spec + /devThe core workflow. Define what to build, then build it — with every change traced to a REQ.
/spec auth "user login with email and OAuth" # spec-writer → spec.md + design.md
/dev auth # planner → lead-engineer → verifier → done
/dev auth --team # parallel team (db/ui engineers)
/loop auth # review → fix → re-verify until all REQs pass
/createTurn a raw idea into a validated product concept. Seven forcing questions sharpen your thinking into a real product — then a virtual C-suite (CEO, CTO, CPO, CMO, CDO) debates your idea as a team, catching blind spots before you write a single spec. Details →
/create "AI recipe app that suggests meals from fridge photos"
# → 7 forcing questions → 3 approaches → C-suite team debate
# → VISION.md + C-REVIEW.md + DECISION.md → convert to /spec
/reforgeTransform an existing codebase into spec-driven development. Analyzes legacy code, accepts change specifications, generates feature specs — blending existing logic with requested modifications.
/reforge ./_legacy/old-project "Switch to App Router, add Tailwind"
# → analysis → change spec → delta → spec generation → validation
# → spec.md + design.md per feature → /dev [feature]
Independent commands for quality, security, and deployment. Full command list →
/review auth # spec compliance + code quality
/security --audit # OWASP Top 10 project-wide scan
/commit auth # auto-generate commit with REQ links
/pr auth # create PR with spec-based body
npx nextjs-claude-code@latest # install SDD workflow
/init # analyze codebase, populate spec docs
/spec auth "user login with email" # define a feature spec
/dev auth # implement the feature
Prerequisites: Node.js >= 18, Claude Code
Installation guide: For Humans | For Claude Code: curl -s https://raw.githubusercontent.com/ByeongminLee/nextjs-claude-code/main/docs/en/installation.md
Features are never completed in a single iteration. You ship a basic checkout, add coupons a month later, then subscriptions, then promotions. At every step you need to know what was built before and what changed.
spec/feature/[name]/) that persists throughout the project. Changes accumulate as history entries./create/reforge transforms existing projects into spec-driven development--team modeminimal / standard / strict intensity controlUser Claude Agents Files
──── ───────────── ─────
/create "idea" ──→ create-orchestrator ──→ spec/create/[name]/VISION.md
c-ceo/cto/cpo/cmo/cdo spec/create/[name]/C-REVIEW.md
spec/create/[name]/DECISION.md
/reforge [path] ──→ reforge-orchestrator──→ spec/reforge/[name]/ANALYSIS.md
"changes" codebase-analyzer spec/reforge/[name]/DELTA.md
reforge-spec-gen ──→ spec/feature/[name]/spec.md + design.md
/spec [name] "..." ──→ spec-writer ──→ spec/feature/[name]/spec.md
spec/feature/[name]/design.md
/dev [name] ──→ planner ──→ spec/feature/[name]/PLAN.md
↓ (user confirms)
lead-engineer ──→ source code
↓ (--team: db/ui/worker)
verifier ──→ verification report
↓
completion ──→ spec/STATE.md + history/
| Feature | Description |
|---|---|
| Checkpoints | decision (direction choice), human-verify (UI check), auth-gate (payment/auth) |
| Auto-fix budget | 3 retries per mode, then escalation |
| Verification | 5 levels: files exist → no stubs → tests/mocks exist → wired correctly → browser test → human verify |
| Resume protocol | /dev resumes from where it left off (phase-aware) |
| Hook profiles | minimal (security only) → standard → strict (all guards) |
| Token isolation | /create docs in spec/create/, /reforge docs in spec/reforge/ — never loaded by /spec or /dev |
| Issue | Solution |
|---|---|
| Plan approval stuck | Re-run /dev [name] to restart |
| Auto-fix budget exhausted | Edit Used: 0 in PLAN.md after manual fixes |
| Team mode not working | Check CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1 in settings |
| Hook errors on writes | Set NCC_HOOK_PROFILE=minimal in settings |
NCC incorporates proven patterns from GSD, gstack, Everything Claude Code, Oh My OpenAgent, Superpowers, Vercel Plugin, Spec Kit, and OpenSpec.
Issues and PRs welcome at github.com/ByeongminLee/nextjs-claude-code.
MIT
FAQs
Spec-Driven AI Development workflow for Next.js & React with Claude Code
The npm package nextjs-claude-code receives a total of 11 weekly downloads. As such, nextjs-claude-code popularity was classified as not popular.
We found that nextjs-claude-code demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.