
Research
TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.
Utility to parse a string bytes (ex: 1TB) to bytes (1099511627776) and vice-versa.
This is a Node.js module available through the
npm registry. Installation is done using the
npm install command:
$ npm install bytes
var bytes = require('bytes');
Default export function. Delegates to either bytes.format or bytes.parse based on the type of value.
Arguments
| Name | Type | Description |
|---|---|---|
| value | number|string | Number value to format or string value to parse |
| options | Object | Conversion options for format |
Returns
| Name | Type | Description |
|---|---|---|
| results | string|number|null | Return null upon error. Numeric value in bytes, or string value otherwise. |
Example
bytes(1024);
// output: '1KB'
bytes('1KB');
// output: 1024
Format the given value in bytes into a string. If the value is negative, it is kept as such. If it is a float, it is rounded.
Arguments
| Name | Type | Description |
|---|---|---|
| value | number | Value in bytes |
| options | Object | Conversion options |
Options
| Property | Type | Description |
|---|---|---|
| decimalPlaces | number|null | Maximum number of decimal places to include in output. Default value to 2. |
| fixedDecimals | boolean|null | Whether to always display the maximum number of decimal places. Default value to false |
| thousandsSeparator | string|null | Example of values: ' ', ',' and '.'... Default value to ''. |
| unit | string|null | The unit in which the result will be returned (B/KB/MB/GB/TB). Default value to '' (which means auto detect). |
| unitSeparator | string|null | Separator to use between number and unit. Default value to ''. |
Returns
| Name | Type | Description |
|---|---|---|
| results | string|null | Return null upon error. String value otherwise. |
Example
bytes.format(1024);
// output: '1KB'
bytes.format(1000);
// output: '1000B'
bytes.format(1000, {thousandsSeparator: ' '});
// output: '1 000B'
bytes.format(1024 * 1.7, {decimalPlaces: 0});
// output: '2KB'
bytes.format(1024, {unitSeparator: ' '});
// output: '1 KB'
Parse the string value into an integer in bytes. If no unit is given, or value
is a number, it is assumed the value is in bytes.
Supported units and abbreviations are as follows and are case-insensitive:
b for byteskb for kilobytesmb for megabytesgb for gigabytestb for terabytespb for petabytesThe units are in powers of two, not ten. This means 1kb = 1024b according to this parser.
Arguments
| Name | Type | Description |
|---|---|---|
| value | string|number | String to parse, or number in bytes. |
Returns
| Name | Type | Description |
|---|---|---|
| results | number|null | Return null upon error. Value in bytes otherwise. |
Example
bytes.parse('1KB');
// output: 1024
bytes.parse('1024');
// output: 1024
bytes.parse(1024);
// output: 1024
The 'filesize' package provides similar functionality to 'bytes' by allowing users to convert byte amounts into human-readable strings. It offers more options for customization, such as setting the base, standard (SI or IEC), rounding method, and partials.
The 'pretty-bytes' package is another alternative to 'bytes' that converts byte values into a human-readable format. It supports negative numbers, localization, and can automatically choose the appropriate unit.
FAQs
Utility to parse a string bytes to bytes and vice-versa
The npm package bytes receives a total of 86,547,309 weekly downloads. As such, bytes popularity was classified as popular.
We found that bytes demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.

Security News
/Research
Widespread GitHub phishing campaign uses fake Visual Studio Code security alerts in Discussions to trick developers into visiting malicious website.