
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
get-pixels
Advanced tools
Given a URL/path, grab all the pixels in an image and return the result as an ndarray. Written in 100% JavaScript, works both in browserify and in node.js and has no external native dependencies.
Currently the following file formats are supported:
PNGJPEGGIFvar getPixels = require("get-pixels")
getPixels("lena.png", function(err, pixels) {
if(err) {
console.log("Bad image path")
return
}
console.log("got pixels", pixels.shape.slice())
})
npm install get-pixels
require("get-pixels")(url[, type], cb(err, pixels))Reads all the pixels from url into an ndarray.
url is the path to the file. It can be a relative path, an http url, a data url, or an in-memory Buffer.type is an optional mime type for the image (required when using a Buffer)cb(err, pixels) is a callback which gets triggered once the image is loaded.Returns An ndarray of pixels in raster order having shape equal to [width, height, channels].
Note For animated GIFs, a 4D array is returned with shape [numFrames, width, height, 4], where each frame is a slice of the final array.
(c) 2013-2014 Mikola Lysenko. MIT License
Jimp is a powerful image processing library for Node.js that supports reading and writing various image formats, manipulating images, and accessing pixel data. Compared to get-pixels, Jimp offers a broader range of image manipulation features such as resizing, cropping, and applying filters.
Sharp is a high-performance image processing library for Node.js that supports reading and writing various image formats, resizing, cropping, and converting images. Sharp is known for its speed and efficiency, making it a good choice for high-performance applications. Unlike get-pixels, Sharp focuses more on image transformation and optimization.
Pngjs is a pure JavaScript library for reading and writing PNG files. It provides access to pixel data and supports various PNG features such as transparency and color types. While pngjs is limited to PNG files, it offers more control over PNG-specific features compared to get-pixels.
FAQs
Reads the pixels of an image as an ndarray
The npm package get-pixels receives a total of 310,593 weekly downloads. As such, get-pixels popularity was classified as popular.
We found that get-pixels demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.