
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
This module introduces reading and writing support for JPEG XL directly from Python 3.
JXLPy is based on JPEG XL implementation in imagecodecs but doesn't it require Numpy and any external dependencies besides Cython and libjxl.
It also provides support for Pillow via plugin.
This project is still in alpha stages and needs testing. It may contain bugs!
$ pip install jxlpy
Make sure you are using Python 3.x and pip for that version
Build and install libjxl according to instructions here
Install patchelf and auditwheel
$ sudo apt-get install patchelf
$ pip install auditwheel
For Pillow plugin, make sure that Pillow is installed (optional)
$ pip install ---upgrade pillow
Clone this repository
$ git clone https://github.com/olokelo/jxlpy
$ cd jxlpy
Build wheels
$ pip wheel .
Use auditwheel to put necessary libraries into your wheel
$ export LD_LIBRARY_PATH=/usr/local/lib
$ python -m auditwheel repair --plat linux_x86_64 jxlpy-*.whl
Install newly created wheel
$ cd wheelhouse
$ pip install jxlpy-*.whl
Now you should be good to go :)
You can run examples to check if everything works correctly
Installation steps were tested on Ubuntu 20.04
Feature | Status | Importance | Notes |
---|---|---|---|
Reading and writing non-animated 8 bit RGB/RGBA image | Done | - | - |
Creating lossless images | Done | - | - |
Reading animations | Done | - | - |
Pillow plugin | Partial | High | Animation seeking? |
Creating animations | Failed | Medium | - |
Reading HDR images | Done | Medium | - |
Writing HDR images | Done | Low | - |
Reading and writing floating point images | Not started | Low | - |
Support EXIF metadata | Failed | High | - |
Support for other colorspaces | Not started | Low | - |
Support for lossless JPEG recompression | Not started | Medium | - |
Support for progressive and responsive mode | Failed | Medium | - |
Installing on Windows | Partial | Low | - |
FAQs
JPEG XL integration in Python
We found that jxlpy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.