Vidhhii Tomar

Frontend Engineer | React | Next.js | Crafting Modern, Scalable Web Experiences

[Vidhhii Tomar @vidhhii9]

🚀 Exciting News! 🚀

I've just released a new npm package: React Flashcards! 🃏

Easily create interactive flashcards for your React applications. Perfect for learning and teaching. Check it out and let me know what you think! 🎉

👉 https://t.co/eh9SoNjdKF

#React #JavaScript #npm #opensource #coding

[Amazing Vedas @AmazingVedas]

What is anunada अनुनाद?

Anunada is resonance. It is said that if you play the veena next to another and they are finely tuned together, in synchrony, then the strings of the other veena will begin vibrating too

This is the principle of the mantra. The reverberations of the mantra go through all the koshah कोषा:

One slowly tunes the body, mind, prana, buddhi and gets them ready as the proper instruments of the mantra

The body and mind become yantras prepared to hold the anunada as the adhara or foundation

The power of the mantra is immense but one has to tune oneself as one would a sitar or a veena
@MakrandParanspe

[Vidhhii Tomar @vidhhii9]

@samsyntx Okay let’s plan this today!

[Vidhhii Tomar @vidhhii9]

Rapido price hike is getting out of control now! 🙃

[Alvaro Cintas @dr_cintas]

"I don't have a GPU" is officially over.

VS Code now connects directly to Google Colab.

→ You get a free T4 GPU inside your editor.
→ Takes 2 minutes to set up. Their compute.

[Vidhhii Tomar @vidhhii9]

Frontend system design is not just APIs.

Communication choices matter — HTTP, polling, WebSockets, webhooks.

A huge shoutout to @akshaymarch7 for an excellent Frontend System Design series that ties it all together.

[Vidhhii Tomar @vidhhii9]

Revisiting REST, GraphQL & gRPC lately not what they are, but when to use them.

-REST for simplicity
-GraphQL for flexible UIs
- gRPC for fast internal services

A big thanks to @akshaymarch7 & @engineerchirag for such a well-organized FDS series!

[Vidhhii Tomar @vidhhii9]

Leadership is all about bringing out the best in your people!

[Vidhhii Tomar @vidhhii9]

@GuptaAnuprash @stripe @stripesupport @stripe

[Vidhhii Tomar @vidhhii9]

@stripe

[Anuprash Gupta @GuptaAnuprash]

Hi @stripe , we’ve noticed a financial discrepancy on our account. We’ve tried reaching out multiple times via chat and email support but haven’t received a response yet. Could someone please help us look into this? Thanks. @stripesupport
#Stripe

[Akshay Saini @akshaymarch7]

Unpopular opinion: In 2026, AntiGravity is just going to eat all the other AI IDEs for lunch.

[Shruti @ShruPosts]

Instagram's latest nav change is a classic example of data-driven UX.
Explaining the why in the thread ↓

[Eduardo Borges @duborges]

i've been hacked

and traced the malware's wallet to see how much money they actually made from this new exploit

(if you use Next.js/React, READ THIS!)

I woke up to a terrifying email from Hetzner: "Netscan Detected."

my server was blocked and a botnet was using my IP to attack others

i dug into the logs and what I found the anatomy of the attack:

1) The Symptoms: I logged into htop and saw the mess:

- CPU usage: 361%
- A process named ./3ZU1yLK4 running wild
- Random connections to an IP in the Netherlands

my server wasn't serving my app anymore; it was mining crypto for someone else!

2) The Culprit: It wasn't a random SSH brute force. It was inside my Next.js container

the malware was sophisticated

it renamed itself nginxs and apaches to look like web servers

it even had a "killer" script that hunted down other hackers' miners to kill the competition

3) The "Root" Cause (literally): Probably the recent React/Next.js CVE-2025-66478 exploit was the entry point

(my project was running on "next": "15.5.4", behind cloudflare dns, but their recent fix didn't work apparently)

but the fatal error was mine: my Docker container was running as ROOT

Coolify deploys like this automatically when using Nixpacks, and I never changed it...

so because of USER root, the malware could install cron, systemd, and persistence scripts to survive reboots

meaning, it was able to infect my whole server, from a single Next.js docker!

4) The Forensics: I ran docker diff on the container - the hacker didn't just run a script, they installed a whole toolset..

- /tmp/apaches.sh (The installer)
- /var/spool/cron/root (The persistence)
- /c.json (The wallet config)

5) The Fix: I killed the container, scrubbed the host, and extracted the malware for analysis.

but the real fix is in the Dockerfile. if you are deploying Node/Next.js, DO NOT use the default (root), you must:

- RUN adduser --system nextjs
- USER nextjs

if you have Docker on ROOT and didn't update the exploited react version, you'll be hacked soon

check your containers NOW. Run: docker exec <container_id> id

(or get the full list first: docker stats --no-stream)

If it says uid=0(root), you are one vulnerability away from being a crypto-miner host.

(it's easy to notice when hacked, it will be a command running on the top CPU%, using all your hardware resources)

6) The Money: I dug deeper and recovered the config file (c.json)

- Wallet: A Monero (XMR) address: 831abXJn8dBdVe5nZ***
- Pool: auto.c3pool . org

and ofc i tracked the hacker’s wallet on the mining pool

7) The Scale: My server wasn't alone. It was just 1 of 415 active zombies in this botnet

they are burning the CPU of 400+ cloud servers... to earn...

guess how many millions?

$4.26/day

on the image attached you can see: "Total Paid: 0.00", meaning this campaign just started. I caught them on Day 1.

i also tracked back the server where they hosted the malware, and by inspecting the code, I found several comments in Chinese, so I guess that's their origin

im rebuilding from scratch on a fresh VPS. the lesson was expensive, but at least I caught it before the hosting nuked my account permanently...

PS: I have the IP for all the other machines mining with that malware, not sure how I can help them, but feel free to contact me if ur doing infosec

stay safe

[Vidhhii Tomar @vidhhii9]

@youtubemusic pleaseeee 😭 I’m feeling left out. Spotify people are flexing their Wrapped 😭 Make our YT Music Wrapped too, pleaseeee! 😭😭💔

@YouTube

#SpotifyWrapped #YouTubeMusicRecap

[Siddharth Jhanwar @jhanwarsid]

At @zoiceai, we’re ensuring that every voice counts - no matter where it comes from or what language it speaks.

🌐 For more info, visit https://t.co/bwKV3qYXIQ

#VoiceAI #ZoiceAI #SiddharthJhanwar #AIForIndia #RegionalLanguages #DigitalInclusion #ConversationalAI #TechForGood

[Vidhhii Tomar @vidhhii9]

@gozkybrain4u https://t.co/egtUkhNIBT

here is mine

[Vidhhii Tomar @vidhhii9]

I’ve been noticing a lot of AI-generated websites lately some look great, some feel… off.

How do you judge if a website is AI-made?

#WebDevelopment #artificial_intelligence

[Vidhhii Tomar @vidhhii9]

@HaimantikaM Same here! It feels frustrating, but consistency really brings it back fast. Just keep showing up and you will get back to or even stronger than where you were!!!

[Pravin @pravinkaswan]

The Transition to the Meaning Economy (I call it Lakshmi)

Lakshmi comes from the root word Lakshay (Goal, Intention)

AI is not gonna end human work- it will end meaningless work. It’s here to give us space to do what only humans can do:

Create from authenticity.
Connect through emotion.
Contribute through intention.

Your real competitive advantage in this new era is not speed, skill, or data-
it’s frequency: the quality of consciousness you bring into creation.

When you align your inner state, you design a new outer reality- your personal frequency becomes your personal economy.

[Vidhhii Tomar @vidhhii9]

All you need is a laptop and WiFi.
Learn something. Build something.
The internet is your classroom. 🚀

[Vidhhii Tomar @vidhhii9]

Every day I learned something new sometimes from tutorials, sometimes from teammates, sometimes from mistakes. And that’s when I realized: Learning is not a phase. It’s a lifestyle. There is always more to explore. More to build. More to experience. Still learning. Still growing!

[Vidhhii Tomar @vidhhii9]

I started my journey with just Figma.
No structure, no real direction , just curiosity!!!
Then I stepped into web development.

But someone once told me:
“Your next day should be better than your yesterday.”
And I held on to that.