
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
google-translate-token-plus
Advanced tools
A package that generates the necessary token to use the Google Translate API for free ,supprting CHINA country
A package that generates the necessary token to use the Google Translate API for free :dollar::no_entry_sign:
translate.google.com uses a token to authorize the requests. If you are not Google, you do not have this token and will have to pay $20 per 1 million characters of text. 457 This package is the result of reverse engineering on the obfuscated and minified code used by Google to generate such token.
The token is based on a seed which is updated once per hour and on the text that will be translated. Both are combined – by some strange math – in order to generate a final token (e.g. 820594.703830
) which is used by the API to validade the request.
npm install --save google-translate-token-plus
// here net is not required, can be 'cn', 'com', default is 'com', but 'cn' would be friendly to CHINA
const net = 'cn';
const token = require('google-translate-token-plus')(net);
token.get('Hello').then(console.log);
//=> { name: 'tk', value: '159402.284291' }
google-translate-api-plus
– A free and unlimited API for Google Translate :dollar::no_entry_sign:FAQs
A package that generates the necessary token to use the Google Translate API for free ,supprting CHINA country
The npm package google-translate-token-plus receives a total of 0 weekly downloads. As such, google-translate-token-plus popularity was classified as not popular.
We found that google-translate-token-plus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.