Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
alternative-pdf-combine
Advanced tools
Alternative approach to combine pdf's (doesn't support windows, requires poppler on linux)
There are various tools in the npm that allow for combining pdf's this tool is limited to Mac & Linux but it
should work on macs out-of-the-box and on linux by using popplers
pdfunite`. This tool is by no means well
tested use on own risk!
Install it using npm i alternative-pdf-combine -g
and then run
$ Usage: alternative-pdf-combine out.pdf in1.pdf ... inx.pdf
To enable a debug output you can set the environment variable DEBUG_ALTERNATIVE_PDF_COMBINE=true
.
After installing the package with npm i alternative-pdf-combine
you can use it like this.
var combinePdfs = require('alternative-pdf-combine')
combinePdfs([
fs.readFileSync('pdf1.pdf'),
{file: 'pdf2.pdf'}, // will automatically call fs.readFileSync
new Buffer('...'), // will use this buffer
'...', // will be converted to Buffer using new Buffer(txt)
{text: '...', encoding: 'utf8'} // will convert the text to a buffer using new Buffer(obj.text, obj.encoding)
], function (err, combinedBuffer) {
if (err) {
console.log(err)
process.exit(1)
}
fs.writeFile('test_out.pdf', combinedBuffer, function (err) {
if (err) {
console.log(err)
process.exit(1)
}
console.log(out)
})
})
By default, on Mac, it will try to use mac's pdf combination. But it will use pdfunite
if installed on a mac since
its way faster and creates smaller files. You can install pdfunite on mac using homebrew: brew install poppler
If you wish to always use Mac's pdf combination solution set the environment variable:
ALTERNATIVE_PDF_COMBINE_OVERRIDE_PDFUNITE=true
Contributions and improvements welcome!
FAQs
Alternative approach to combine pdf's (doesn't support windows, requires poppler on linux)
The npm package alternative-pdf-combine receives a total of 5,730 weekly downloads. As such, alternative-pdf-combine popularity was classified as popular.
We found that alternative-pdf-combine demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.