
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@slack/logger
Advanced tools
The @slack/logger package is intended to be used as a simple logging interface that supports verbosity levels.
This package supports Node v18 and higher. It's highly recommended to use the latest LTS version of node, and the documentation is written using syntax and features from that version.
$ npm install @slack/logger
This package exports a ConsoleLogger class, a generic Logger interface and a LogLevel enum.
The source code is short (~150 lines of code), so check out src/index.ts for details, but the ConsoleLogger API
mimics the default node console API with three additions:
getLevel(): returns the currently-specific LogLevel of the logger.setLevel(LogLevel): sets the LogLevel of the logger.setName(string): sets a prefix to display in logs. Useful if you have multiple loggers active.If you get stuck, we're here to help. The following are the best ways to get assistance working through your issue:
developers@slack.comWinston is a versatile logging library with support for multiple transports, log levels, and formats. It is more feature-rich compared to @slack/logger and is suitable for more complex logging requirements.
Bunyan is a simple and fast JSON logging library. It provides a CLI tool for pretty-printing logs and is designed for high-performance logging. It offers more advanced features compared to @slack/logger.
Pino is a low-overhead logging library that focuses on performance. It provides fast and efficient logging with a simple API. Pino is more performance-oriented compared to @slack/logger.
FAQs
Logging utility used by Node Slack SDK
The npm package @slack/logger receives a total of 3,168,192 weekly downloads. As such, @slack/logger popularity was classified as popular.
We found that @slack/logger demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.