
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
A PNG decoder written in TypeScript
This project is a fork of png.js and was created for use in pdf-lib. The original project is written in CoffeeScript. It contains a file for browser environments (png.coffee) and a different file for Node environments (png-node.coffee). This fork is a rewrite of the original project in TypeScript. All environment specific code has been removed or replaced with environment-independent code.
PNG.decodePixels// Import the PNG class
import PNG from 'png-ts';
// Create a PNG object
const pngImage = PNG.load(/* Uint8Array containing bytes of PNG image */);
// `pixels` is a 1D array (in rgba order) of decoded pixel data
const pixels = pngImage.decodePixels();
To install the latest stable version:
# With npm
npm install --save png-ts
# With yarn
yarn add png-ts
This assumes you're using npm or yarn as your package manager.
You can also download png-ts as a UMD module from unpkg. The UMD builds have been compiled to ES5, so they should work in any modern browser. UMD builds are useful if you aren't using a package manager or module bundler. For example, you can use them directly in the <script> tag of an HTML page.
The following builds are available:
When using a UMD build, you will have access to a global window.PNG variable. This variable contains the PNG class exported by png-ts. For example:
// NPM module
import PNG from 'pdf-lib';
const pngImage = PNG.load(/* ... */)
// UMD module
var pngImage = window.PNG.load(/* ... */)
PNG.decode() and PNG.copyImageDataToBuffer() methods.pako inflates the bundle size, replace if necessarypng-js is a (animated) PNG decoder written in JavaScript for the HTML5 canvas element and Node.js (http://devongovett.github.io/png.js/).FAQs
A PNG decoder written in TypeScript
The npm package png-ts receives a total of 3,168 weekly downloads. As such, png-ts popularity was classified as popular.
We found that png-ts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.