
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
A WebTranslateIt command-line tool in Node.js.
Installation
$ yarn global add wti
Configuration
Basically, wti
is to be run on a project root directory, and looks for a wti-config.json
file containing your project's informations.
The command wti init
lets you create this file.
$ wti init
What is your project's api key?: <your private key>
Initializing...... [SUCCESS] Project is initialized
You can find the API token in your project settings.
Usage
Execute wti help
to see the usage:
USAGE
$ wti [COMMAND]
COMMANDS
add create and push a new master language file
addLocale add a new locale to the project
help display help for wti
init configure the project to sync with
pull pull target language file(s)
push push master language file
rm delete a master language file from a project
See `wti help <command>` for more information on a specific command.
Command | Action |
---|---|
wti add <path/to/master/file.json> | Upload a new master language file |
wti rm <path/to/master/file.json> | Delete a master language file |
wti push | Update a master language file |
wti pull | Download target language files |
wti addLocale fr | Add a new locale to the project |
wti rmLocale fr | Remove a locale from the project |
wti status | View project statistics |
1. Prerequisite
2. Install and configure i18next
$ yarn add i18next react-i18next
$ yarn add -D i18next-parser
// Extract locales
$ i18next --config i18next-parser.config.js
3. Install and configure WTI client
$ yarn add -D wti
$ wti init
$ wti add locale fr
$ ... add other languages
$ wti add locales/en/translation.json
$ wti push
4. Translate keys on WebTranslateIt, and then pull translations
$ wti pull
5. Add or remove translation keys
$ i18next --config i18next-parser.config.js
$ wti push
FAQs
A WebTranslateIt command-line tool in Node.js
The npm package wti receives a total of 0 weekly downloads. As such, wti popularity was classified as not popular.
We found that wti demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.