
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@harusame0616/pino-newrelic-log-api-transport
Advanced tools
A Pino v7+ transport to send log to newrelic with Logs API.
Caution
newrelic has an automatic log forwarding feature.
Consider using the official nodejs agent.
https://docs.newrelic.com/jp/docs/apm/agents/nodejs-agent/installation-configuration/install-nodejs-agent
If for some reason you cannot use the automatic log forwarding feature with nodejs agent, please use it.
pnpm @harusame0616/pino-newrelic-log-api-transport
import pino from 'pino';
import {
NewrelicLogAPITransportOption,
endpointEnum,
} from '@harusame0616/pino-newrelic-log-api-transport';
const options: NewrelicLogAPITransportOption = {
// licenseKey: <YOUR_LICENSE_KEY> or set NEWRELIC_LICENSE_KEY in environment variables
endpoint: endpointEnum.us,
};
const logger = pino({
messageKey: 'message',
errorKey: 'error',
level: 'info',
base: {
entity: {
// your app name
name: process.env.NEWRELIC_APP_NAME,
},
},
formatters: {
level: (label) => ({ level: label }),
},
transport: {
target: '@harusame0616/pino-newrelic-log-api-transport',
options: options,
},
});
logger.info('info level log');
※ If you are using the nextjs app router you may need to add "pino" to serverComponentsExternalPackages in next.config.
https://github.com/vercel/next.js/discussions/46987#discussioncomment-6986115
and run bellow
NEWRELIC_LICENSE_KEY=YOUR_LICENSE NEWRELIC_APP_NAME=YOUR_APP_NAME node YOUR_APP
FAQs
pino transport for newrelic log api
We found that @harusame0616/pino-newrelic-log-api-transport demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.