
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@spark-apps/piclet
Advanced tools
piclet.app - Use all tools directly in your browser. No installation, 100% client-side processing, your images never leave your device.
| Tool | Description | Formats | Available In |
|---|---|---|---|
| Make Icon Convert images to ICO with multiple resolutions (256, 128, 64, 48, 32, 16) | PNG, GIF* | CLI, GUI, Web | |
| Remove Background Remove solid backgrounds with configurable fuzz tolerance | PNG, GIF | CLI, GUI, Web | |
| Scale Image Resize images with optional square padding | PNG, JPG, GIF, BMP | CLI, GUI, Web | |
| Icon Pack Generate complete icon sets for Web, Android, and iOS | PNG, JPG, GIF* | CLI, GUI, Web | |
| Store Assets Generate graphics for Steam, itch.io, Unity Asset Store, and app stores | PNG, JPG, GIF | GUI, Web | |
| Extract Frames Extract individual frames from animated GIFs | GIF | CLI, GUI |
*For GIFs, uses selected frame or first frame
When you load an animated GIF in the GUI, PicLet provides:
Visit piclet.app - Works in any modern browser, 100% client-side processing.
Download and install via npm for CLI access and Windows Explorer integration:
npm install -g @spark-apps/piclet
Requirements:
sudo apt update && sudo apt install imagemagickRight-click any image file in Windows Explorer to access PicLet tools:
GUI with real-time preview and batch processing
Fast batch processing via terminal:
# Convert PNG to ICO
piclet makeicon logo.png
# Remove background
piclet remove-bg photo.png
# Scale image
piclet scale image.jpg
# Generate icon pack for all platforms
piclet iconpack app-icon.png
# Open GUI with store assets preset
piclet storepack image.png
# Extract frames from animated GIF
piclet frames animation.gif
CLI for automation and batch operations
# Re-register context menu entries
piclet install
# Remove context menu entries
piclet uninstall
# Uninstall completely
npm uninstall -g @spark-apps/piclet
When you run piclet iconpack, it generates:
Web (8 files)
favicon.ico, favicon-16x16.png, favicon-32x32.png, favicon-48x48.pngapple-touch-icon.png (180px)android-chrome-192x192.png, android-chrome-512x512.pngmstile-150x150.pngAndroid (6 files)
mipmap-mdpi through mipmap-xxxhdpi directoriesplaystore-icon.png (512px)iOS (15 files)
AppIcon sizes including @2x/@3x variantsAppIcon-1024.png for App Store⭐ Star the repo and I power up like Mario!
🤝 Contributions are welcome.
FAQs
Lightweight image tools for content creators
We found that @spark-apps/piclet demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.