
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@allthings/babel-plugin-react-intl
Advanced tools
Extracts string messages for translation from modules that use React Intl.
This has been forked off from babel-plugin-react-intl with some additional options
Extracts string messages for translation from modules that use React Intl.
This Babel plugin works with React Intl v2.x
$ yarn add --dev @allthings/babel-plugin-react-intl
This Babel plugin only visits ES6 modules which import React Intl.
The default message descriptors for the app's default language will be extracted from: defineMessages(), <FormattedMessage>, and <FormattedHTMLMessage>; all of which are named exports of the React Intl package.
If a message descriptor has a description, it'll be removed from the source after it's extracted to save bytes since it isn't used at runtime.
.babelrc (Recommended).babelrc
{
"plugins": [
["react-intl", {
"messagesDir": "./build/messages/"
}]
]
}
messagesDir: The target location where the plugin will output a .json file corresponding to each component from which React Intl messages were extracted. If not provided, the extracted message descriptors will only be accessible via Babel's API.
enforceDescriptions: Whether message declarations must contain a description to provide context to translators. Defaults to: false.
extractSourceLocation: Whether the metadata about the location of the message in the source file should be extracted. If true, then file, start, and end fields will exist for each extracted message descriptors. Defaults to false.
moduleSourceName: The ES6 module source name of the React Intl package. Defaults to: "react-intl", but can be changed to another name/path to React Intl.
additionalComponentNames: To visit more than the components and defineMessages provided by react-intl set this option to the following format:
"additionalComponentNames": {
"react-lingo": ["default", "LingoFormattedMessage"]
}
The extract message descriptors are available via the metadata property on the object returned from Babel's transform() API:
require('@babel/core').transform('code', {
plugins: ['react-intl']
}) // => { code, map, ast, metadata['react-intl'].messages };
FAQs
Extracts string messages for translation from modules that use React Intl.
We found that @allthings/babel-plugin-react-intl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.