![Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm](https://cdn.sanity.io/images/cgdhsj6q/production/2f92d3fae253fededc3c14fe14b4a4b6a2d7afa4-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@angular/localize
Advanced tools
@angular/localize is an Angular package that provides localization support for Angular applications. It allows developers to easily translate their applications into different languages and manage translations efficiently.
Extracting Translatable Strings
This command extracts translatable strings from your Angular application and generates a translation file (e.g., messages.xlf). This file can then be used to provide translations for different languages.
ng extract-i18n
Translating Application
This command serves the application using a specific translation file (e.g., French). The application will display the translated strings based on the provided translation file.
ng serve --configuration=fr
Marking Strings for Translation
This code snippet shows how to mark a string for translation using the `i18n` attribute. The string 'Hello, world!' will be extracted and can be translated into different languages.
<p i18n>Hello, world!</p>
angular-translate is another popular library for AngularJS (1.x) that provides i18n support. It allows you to define translations in JSON files and switch between languages dynamically. While it is not compatible with Angular (2+), it offers similar functionalities for AngularJS applications.
i18next is a powerful internationalization framework for JavaScript applications, including Angular. It provides a wide range of features for managing translations, including support for pluralization, context, and interpolation. Compared to @angular/localize, i18next is more versatile and can be used with various JavaScript frameworks.
The sources for this package are in the main Angular repo. Please file issues and pull requests against that repo.
Usage information and reference details can be found in Angular documentation.
License: MIT
FAQs
Angular - library for localizing messages
The npm package @angular/localize receives a total of 814,818 weekly downloads. As such, @angular/localize popularity was classified as popular.
We found that @angular/localize demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.