
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
Translation of all Akid projects is managed on the Transifex service: https://www.transifex.com/llk/public
This repository collects translations submitted to the Akid projects on Transifex. Please do not submit PRs. If you would like to contribute translations, please sign up to translate on Transifex.
npm install --save-dev akid-l10n
import locales, {localeData, isRtl} from 'scratch-l10n';
import editorMessages from 'akid-l10n/locales/editor-messages';
locales: currently supported locales for the Akid projectisRtl: function that returns true if the locale is one that is written right-to-leftlocaleData: locale data for the supported locales, in the format accepted by addLocaleData required by react-intleditorMessages: the actual message strings for all supported locales for a particular resource. editorMessages collects all the strings for the interface, extensions and paint-editor.akid-l10n provides:
build-i18n-src: script that uses babel and plugins to extract all FormattedMessage strings for translation. Combines the message from all the source files into one en.jsontx-push-src: script to push the en.json file to Transifex. Requires that the environment variable TX_TOKEN is set with a value that has developer access to the Akid projects on Transifex (i.e. Akid Team only)akid-l10n uses semantic versioning - breaking changes will increment the major version number, and new features (e.g. a new language) will increment the minor version number. However, the patch number is actually a datetime string. That way it's easy to see how recently the translations were updated.
In general, changes that require a PR (new functionality, new language) should increment the minor version. Pulling new translations from Transifex is automated and will commit to master directly.
We are moving away from using the tx cli, so the .tx/config file will eventually be deprecated.
FAQs
Localization for the Akid components
We found that akid-l10n demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.