
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
@asposecloud/aspose-imaging-cloud
Advanced tools
Aspose.Imaging Cloud is a true REST API that enables you to perform a wide range of image processing operations including creation, manipulation and conversion in the cloud, with zero initial costs. Our Cloud SDKs are wrappers around REST API in various programming languages, allowing you to process images in language of your choice quickly and easily, gaining all benefits of strong types and IDE highlights.
This repository contains Aspose.Imaging Cloud Node.js SDK source code which is written in TypeScript. This SDK allows you to work with Aspose.Imaging Cloud REST APIs in your Node.js applications quickly and easily, with zero initial cost.
To use this SDK, you will need Client ID and Client Secret which can be looked up at Aspose Cloud Dashboard (free registration in Aspose Cloud is required for this).
The SDK also can be used as Aspose.Imaging Cloud JavaScript SDK.
BMP, GIF, JPEG, JPEG2000, PSD, TIFF, WEBP, PNG, WMF, EMF, SVG, TGA, APNG
PDF, DICOM
DJVU, DICOM, CDR, CMX, ODG, DNG, EPS, EMZ, WMZ, SVGZ
Since version 19.4, SDK includes support of storage operations for better user experience and unification, so now there's no need to use 2 different SDKs!
It gives you an ability to:
Detalied official documentation can be found at the following link.
Please, add the following nmp package to your project.json as a dependency.
{
"dependencies": {
"@asposecloud/aspose-imaging-cloud": "^23.5.0"
}
}
Import the dependencies to your code as follows.
import * as imaging from "@asposecloud/aspose-imaging-cloud";
Please, look at Examples document for basic usage or use the Examples folder for more sophisticated scenarios.
// Get your ClientId and ClientSecret from https://dashboard.aspose.cloud (free registration required).
const imagingApi = new ImagingApi("MY_CLIENT_SECRET", "MY_CLIENT_ID");
const request = new ConvertImageRequest({ "sample.jpg", "png", "tempFolder", "My_Storage_Name" });
imagingApi.convertImage(request).then((response) => {
fs.writeFile("sample.png", response.body, (err) => {
if (err) throw err;
});
});
Starting from v19.7, you can choose either to use Aspose Cloud-hosted image processing service (the standard way) or the Docker image from Docker Hub deployed on-premise to serve the requests. The details about key differences and deployment process will be described on the dedicated Docker Hub page as soon as it's released.
To succeed with your on-premise service usage by the SDK, you need to:
const imagingApi: imaging.ImagingApi = new imaging.ImagingApi(null, null, "yourServiceUrl");
All Aspose.Imaging Cloud SDKs, helper scripts and templates are licensed under MIT License.
| .NET | Java | PHP | Python | Ruby | Node.js | Android |
|---|---|---|---|---|---|---|
| GitHub | GitHub | GitHub | GitHub | GitHub | GitHub | GitHub |
| NuGet | Maven | Composer | PIP | GEM | NPM | Maven |
Product Page | Documentation | API Reference | Code Samples | Blog | Free Support | Free Trial
FAQs
Aspose.Imaging Cloud Node.js SDK
The npm package @asposecloud/aspose-imaging-cloud receives a total of 138 weekly downloads. As such, @asposecloud/aspose-imaging-cloud popularity was classified as not popular.
We found that @asposecloud/aspose-imaging-cloud demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.