
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@amazeeio/amazeeio-logs
Advanced tools
This is a nodejs helper called amazeeio-logs
within the amazeeio lagoon deployment system.
It allows nodejs services to log messages to the amazeeio-logs
rabbitmq exchange, which then are handled by other services like elasticsearch and slack.
import { sendToAmazeeioLogs, initSendToAmazeeioLogs } from '@amazeeio/amazeeio-logs';
initSendToAmazeeioLogs();
sendToAmazeeioLogs(severity: string, sitegroup: string, uuid: string, event: string, meta: object, message: string)
severity
- one of error, warn, info, verbose, debug, silly
based on winston log levelssitegroup
- sitegroup this log message belongs to, can be empty stringuuid
- webhook uuid this log message belongs to, can be emptyevent
- name of the event to be logged, is used to define were the log should be displayed later (like slack, hipchat, etc.)meta
- additional information about the message in a javascript objectmessage
- human readable text of the log message, which will be used when the message is shown to humans (like slack)Fully developed in Docker and hosted on amazee.io Openshift, see the .openshift
folder. Deployed via Jenkinsfile.
Uses amazeeio/centos7-node:node6
as base image.
FAQs
amazeeio logs sdk
We found that @amazeeio/amazeeio-logs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.