Blog Posts
Notes and ramblings, typically about LLMs.
React2Shell: The Critical RCE Vulnerability Affecting Next.js Apps
CVE-2025-66478 is a CVSS 10.0 vulnerability in React Server Components that enables remote code execution. Here's what you need to know and how to patch.
Waqas Ishaque•Sat Jan 10 2026
How to Add a Playful Kitten to Your Webpage
Add an adorable cursor-following cat to your website with oneko.js - complete with drag-and-drop, hearts on click, and multiple skins.
Waqas Ishaque•Sat Jan 10 2026

Next.js 16.1: Turbopack Gets Even Faster
File system caching, a new bundle analyzer, and easier debugging—Next.js 16.1 is all about developer experience.
Waqas Ishaque•Sat Jan 10 2026
How to Remove Windows NUL File
That NUL file that appeared while vibe coding? Here's how to delete it.
Waqas Ishaque•Tue Jan 06 2026

CSS Clamp Calculator and Tutorial
Stop using breakpoint jumps. This calculator generates fluid CSS values, and the tutorial explains exactly why the math works.
Waqas Ishaque•Tue Jan 06 2026
