🍺 BREW Explorer

← all formulae

imagejs

brew install imagejs v0.7.2 GPL-3.0-only

Tool to hide JavaScript inside valid image files

1
30-day installs · #14999
7
90-day · #13634
25
365-day · #13398
903
★ GitHub stars · updated 4y ago

GitHub topics

injection xss

Links

Raw metadata
{
  "aliases": [],
  "alternatives": [],
  "build_dependencies": [],
  "categories": [],
  "caveats": null,
  "conflicts_with": [],
  "dependencies": [],
  "deprecated": 0,
  "deprecation_reason": null,
  "desc": "Tool to hide JavaScript inside valid image files",
  "disable_reason": null,
  "disabled": 0,
  "enrichment_fetched_at": "2026-06-20T23:38:48+00:00",
  "first_seen": "2026-06-20T23:34:18+00:00",
  "full_name": "imagejs",
  "github_default_branch": "master",
  "github_last_commit_at": "2022-06-11T19:19:01Z",
  "github_readme_excerpt": "imagejs\n=======\n\nSmall tool to package javascript into a valid image file.  \nCurrently supported are gif and bmp.\n\n### Disclaimer\n\nThis program is just a proof of concept example. It may contain bugs and it is\nonly tested with valid inputs. Do NOT pass untrusted data to this program.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\nINCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR\nPURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM,\nDAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,\nARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\nIN THE SOFTWARE.\n\n### Building\n\nTo build this tool, `build-essential` and `cmake` are required (this is for Debian and Ubuntu based systems, for any other system please refer to its documentation).\nAfter installing the dependencies, run the following commands:\n\n```\n$ git clone https://github.com/jklmnn/imagejs.git\n$ cd imagejs\n$ mkdir build\n$ cd build\n$ cmake ..\n$ make\n```\n\n### Usage\n\nRun `imagejs option jsfile.js`.\nThe outcoming image file will be named like the input file + the image ending..\nOptions are currently `bmp`, `gif`, `webp`, `pnm` and `pgf`.\n\nIf you add `-l` as flag you your image is written to the file so that you can open it and view your code as a line of pixels.  \nThis is currently only supported for bmp files.\n\n### Example\n\n`$ ./imagejs bmp code.js -l`  \nwill return a file named code.js.bmp that is viewable.\n\nCode can now be embedded into existing gif files by using the flag `-i` with a gif file as argument.  \nExample:  \n`$ ./imagejs gif code.js -i giffile.gif`\n\nThis is currently available for gif, bmp, webp, where webp is still beta.\n\nSupported output files are: `gif`, `bmp`, `webp`, `pnm`, `pgf`  \n\nBackground:\n-----------\n\nThis tool allows you to create a picture file that is able to run javascript code.\nA file like this is able to extend XSS vulnerab",
  "github_repo": "jklmnn/imagejs",
  "github_stars": 903,
  "github_topics": [
    "injection",
    "xss"
  ],
  "homepage": "https://github.com/jklmnn/imagejs",
  "homepage_og_description": null,
  "homepage_og_image": null,
  "homepage_title": null,
  "installs_30d": 1,
  "installs_365d": 25,
  "installs_90d": 7,
  "keg_only": 0,
  "keg_only_reason": null,
  "last_seen": "2026-06-20T23:34:18+00:00",
  "license": "GPL-3.0-only",
  "llm_generated_at": null,
  "llm_model": null,
  "name": "imagejs",
  "oldnames": [],
  "one_liner": null,
  "optional_dependencies": [],
  "rank_30d": 14999,
  "rank_365d": 13398,
  "rank_90d": 13634,
  "raw_hash": "340fd9ff4c79b832",
  "recommended_dependencies": [],
  "revision": 0,
  "ruby_source_path": "Formula/i/imagejs.rb",
  "tap": "homebrew/core",
  "test_dependencies": [],
  "uses_from_macos": [],
  "version_head": "HEAD",
  "version_stable": "0.7.2",
  "versioned_formulae": [],
  "why_use_this": null
}