Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
A pure typescript bmp
encoder and decoder.
Supports decoding and encoding in all bit depths (1, 4, 8, 16, 24, 32).
npm install bmp-ts
decode
will return an object that includes all the header properties of the bmp
image file and the data. See header definition below.
const bmp = require('bmp-ts').default;
const bmpBuffer = fs.readFileSync('bit24.bmp');
const bmpData = bmp.decode(bmpBuffer);
pngjs
const bmp = require('bmp-ts').default;
const bmpBuffer = fs.readFileSync('bit24.bmp');
const bmpData = bmp.decode(bmpBuffer, { toRGBA: true });
Currently compression is only supported during decoding. The following methods are implemented:
To encode an image all you need is a buffer with the image data, the height and the width. You can specify the bit depth of the output image by modifying bitPP
. If you do not provide a value, the output image defaults to 24-bit.
All header fields are valid options to encode
and will be encoded into the header.
const bmp = require('bmp-ts').default;
const fs = require('fs');
const bmpData = {
data, // Buffer
bitPP: 1 | 2 | 4 | 16 | 24 | 32, // The number of bits per pixel
width, // Number
height, // Number
};
// Compression is not supported
const rawData = bmp.encode(bmpData);
fs.writeFileSync('./image.bmp', rawData.data);
Property | Type | Purpose |
---|---|---|
fileSize | number | The size of the BMP file in bytes |
reserve1 | number | Reserved; actual value depends on the application that creates the image |
reserve2 | number | Reserved; actual value depends on the application that creates the image |
offset | number | The offset, i.e. starting address, of the byte where the bitmap image data (pixel array) can be found. |
headerSize | number | The size of this header (12 bytes) |
width | number | The bitmap width in pixels (unsigned 16-bit) |
height | number | The bitmap height in pixels (unsigned 16-bit) |
planes | number | The number of color planes, must be 1 |
bitPP | number | The number of bits per pixel |
compress | number | The compression method being used. See the supported compression methods |
rawSize | number | The image size. This is the size of the raw bitmap data; a dummy 0 can be given for BI_RGB bitmaps. |
hr | number | The horizontal resolution of the image. (pixel per metre, signed integer) |
vr | number | The vertical resolution of the image. (pixel per metre, signed integer) |
colors | number | The number of colors in the color palette, or 0 to default to 2n |
importantColors | number | The number of important colors used, or 0 when every color is important; generally ignored |
palette | Color[] | The colors used to render the image. only used for 1, 4, and 8 bitPP images |
data | Byte[] | The data in ABGR |
The color palette is returned when decoding a 1, 4, or 8 bit image.
Color Format:
{
"red": 255,
"green": 255,
"blue": 255,
"quad": 255
}
To encode to 4 or 8 bit a color palette must be provided. 1 bit defaults to black and white but you can override this via palette.
const rawData = bmp.encode({
data,
bitPP: 8,
width,
height,
palette: [
{ red: 255, green: 255, blue: 255, quad: 0 },
{ red: 255, green: 255, blue: 0, quad: 0 },
{ red: 255, green: 0, blue: 255, quad: 0 },
{ red: 255, green: 0, blue: 0, quad: 0 },
{ red: 0, green: 255, blue: 255, quad: 0 },
{ red: 0, green: 255, blue: 0, quad: 0 },
{ red: 0, green: 0, blue: 255, quad: 0 },
{ red: 0, green: 0, blue: 0, quad: 0 },
],
});
fs.writeFileSync('./image.bmp', rawData.data);
FAQs
A pure typescript BMP encoder and decoder
The npm package bmp-ts receives a total of 68,456 weekly downloads. As such, bmp-ts popularity was classified as popular.
We found that bmp-ts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.