
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
This script generates text-only PDFs by reading configuration from a JSON file. It can also overlay text on existing PDFs using QPDF.
npm i -g pdf-writer
pdf-writer <path to a JSON file>
See example/example.json
for reference.
A few notes:
x
and width
are relative to the width of the page; y
and lineGap
are relative to the height of the page.align
is center
and for verticalAlign
is middle
: you don’t need to specify them explicitly.continuation
only works for single-line labels.This script uses QPDF for overlaying text on existing PDFs. An example of how to achieve this can be found in the example file: see the line with the postprocess
configuration. If you don’t have QPDF installed, remove this line in order to be able to run the example.
FAQs
Overlays text on PDFs.
We found that pdf-writer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.