
Security News
Cline CLI npm Package Compromised via Suspected Cache Poisoning Attack
A compromised npm publish token was used to push a malicious postinstall script in cline@2.3.0, affecting the popular AI coding agent CLI with 90k weekly downloads.
Node module for interacting with a Pastec server.
var pastec = require("pastec")({
server: "localhost:4212"
});
pastec.add("test.jpg", "1234", function() {
pastec.fileSimilar("test.jpg", function(err, matches) {
console.log("Similar images:");
matches.forEach(function(item) {
console.log(" - ", item.filepath);
});
});
});
npm install pastec
Upload an image file to a Pastec server and assign it the specified ID for later retrieval. For example if you were to upload:
add("/var/data/test.jpg", "1234")
You should end up with a file with an ID of: 1234 in the Pastec index.
Given the path to an image file, return an array of similar images from the database (in the same format as the urlSimilar() method). For example:
pastec.fileSimilar("test.jpg", function(err, matches) {
matches.forEach(function(match) {
console.log(match.filepath + " " + match.score + "% match.");
});
});
The image is not added to the Pastec index. The object returned as a match would look something like this:
{
"filepath":"./3107100095036_002.jpg",
"rects":{"height":636,"width":421,"x":43,"y":62},
"score":42
}
Given the URL of an image, return an array of similar images from the database (in the same format as the fileSimilar() method). For example:
pastec.urlSimilar("http://test.com/test.jpg", function(err, matches) {
matches.forEach(function(match) {
console.log(match.filepath + " " + match.score + "% match.");
});
});
The image at the specified URL is not added to the Pastec index. The object returned as a match would look something like this:
{
"filepath":"./3107100095036_002.jpg",
"rects":{"height":636,"width":421,"x":43,"y":62},
"score":42
}
Given a specified Pastec file ID (for example 1234), delete that particular image from the index. It will no longer be returned in the results.
Save the image similarity index to the server at the specified indexFile location. Note that the path to the indexFile is to a path relative to the server, not the local environment.
Created by John Resig.
Released under an MIT license.
FAQs
Node module for using a Pastec server.
The npm package pastec receives a total of 6 weekly downloads. As such, pastec popularity was classified as not popular.
We found that pastec demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A compromised npm publish token was used to push a malicious postinstall script in cline@2.3.0, affecting the popular AI coding agent CLI with 90k weekly downloads.

Product
Socket is now scanning AI agent skills across multiple languages and ecosystems, detecting malicious behavior before developers install, starting with skills.sh's 60,000+ skills.

Product
Socket now supports PHP with full Composer and Packagist integration, enabling developers to search packages, generate SBOMs, and protect their PHP dependencies from supply chain threats.