
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
A CLI tool to expand \input commands in TeX files and filter BibTeX files based on citations.
A command-line tool to expand \input
commands in TeX files and filter BibTeX files based on citations.
\input
commands in TeX files.tex
extension present or not in \input
commands# Minify a TeX file (prints to stdout)
uvx tex-minify minify input.tex
# Save minified output to file
uvx tex-minify minify input.tex -o output.tex
# Specify base directory for \input resolution
uvx tex-minify minify input.tex --base-dir /path/to/tex/files -o output.tex
# Filter BibTeX file to only keep cited references
uvx tex-minify filter-bib paper.tex references.bib -o filtered.bib
First install:
pip install tex-minify
Then use:
# Minify a TeX file
tex-minify minify input.tex -o output.tex
# Filter BibTeX file
tex-minify filter-bib paper.tex references.bib -o filtered.bib
# Setup development environment
pixi install
pixi run install
# Run the tool
pixi run -- tex-minify minify input.tex
pixi run -- tex-minify filter-bib paper.tex references.bib
Process a TeX file and expand all \input
commands.
tex-minify minify INPUT_FILE [-o OUTPUT] [--base-dir BASE_DIR]
Arguments:
INPUT_FILE
: Path to the input TeX file-o, --output
: Output file path (optional, defaults to stdout)--base-dir
: Base directory for resolving \input
paths (optional, defaults to input file directory)Filter a BibTeX file to only include references that are cited in the TeX file.
tex-minify filter-bib TEX_FILE BIB_FILE [-o OUTPUT]
Arguments:
TEX_FILE
: Path to the TeX file containing citationsBIB_FILE
: Path to the BibTeX file to filter-o, --output
: Output file path (optional, defaults to stdout)The tool will exit with a non-zero status code and display an error message if:
\input
files are not foundFAQs
A CLI tool to expand \input commands in TeX files and filter BibTeX files based on citations.
We found that tex-minify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.