
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Framework logger for ark team purposes. Based on bunyan library.
If stream logstash
is used with pubsub queue (cfg.pubsub
set to true
) - app will not exit correctly (socket is still open).
You should close socket manually (logstashstream.redis.end()
): https://github.com/mranney/node_redis#clientend
#####First, load library in your app
var Logger = require('logger');
#####Second, init logging function with one of this methods: 1) Init by config
// all fields are optional except "name" and "level"
var cfg = {
name: 'my app',
console: {
level: 'info',
color: true,
timestamp: 'HH:mm:ss '
},
logstash: {
level: 'info',
key: 'logstash',
pubsub: false,
host: '127.0.0.1',
port: 6379,
db: 0
},
file: {
level: 'error',
path: 'error.log'
}
};
var log = new Logger(cfg);
log.error('i will appear only in file')
2) Create streams by yourself
var logger = new Logger('my app');
logger.appendStream({
stream: new Logger.stream.logstash(),
type: 'raw',
level: 'info'
});
logger.appendStream({
stream: new Logger.stream.console(),
type: 'raw',
level: 'info'
});
// if no appendStream called - will be created logger to console only
var log = logger.createLogger();
log.info('hello')
3) Pass streams on init in array
var log = new LoggerClass('my app', [{
stream: process.stdout,
level: 'info'
}]);
log.error('im usable');
4) Load preset
// will load config from presets/dc-fremont.json
var log = new Logger('my app', 'dc-fremont');
log.error('im usable');
Logger supports all bunyan features: passing custom fields, child logging, serializers, logging caugth JS expeptions and http responces, working with streams etc. Please visit bunyan documentation for more.
FAQs
Set of several presets for bunyan logger
The npm package arklogger receives a total of 5 weekly downloads. As such, arklogger popularity was classified as not popular.
We found that arklogger demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.