
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
@memrise/lqip
Advanced tools
Low Quality Image Placeholders (LQIP) Module for Node; fork from original lqip
Note: this is a fork from the original lqip
repo which is no longer actively maintained.
npm install --save lqip
Generating Base64 from an image:
const lqip = require("lqip");
const file = `./dest/to/file/zouhir-riding-a-bike.jpg`;
lqip.base64(file).then((res) => {
console.log(res); // "data:image/jpeg;base64,/9j/2wBDAAYEBQYFBAYGBQYHBwYIChAKCgkJChQODwwQFxQYGBcUFhY.....
});
Generating colour palette from an image:
const lqip = require("lqip");
const file = `./dest/to/file/zouhir-riding-a-bike.jpg`;
lqip.palette(file).then((res) => {
// the response will be sorted from most dominant colour to least
console.log(res); // [ '#628792', '#bed4d5', '#5d4340', '#ba454d', '#c5dce4', '#551f24' ]
});
lqip.base64(filePath: string)
This method accepts an image file path, the file has to be one of those formats ['jpeg', 'jpg', 'png'] and returns a Base64
image string with a valid format and ready to be used in web applications such as in tags source or in CSS properties URLs.
lqip.palette(filePath: string)
This method accepts an image file path, and returns an colour palette as an array of HEX colour values. The array that is returned is sorted from the most to the least dominant colour.
Related projects to this would be lqip-loader for webpack as well as lqip-cli.
Thanks to contributors and Colin van Eenige for his reviews and early testing.
MIT - Zouhir Chahoud
FAQs
Low Quality Image Placeholders (LQIP) Module for Node; fork from original lqip
The npm package @memrise/lqip receives a total of 0 weekly downloads. As such, @memrise/lqip popularity was classified as not popular.
We found that @memrise/lqip demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.