
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
bunyan-buddy
Advanced tools
Reduce the amount of Bunyan boilerplate code required, ideal when working with microservices.
Reduce the amount of Bunyan boilerplate code required with integration for Google Cloud Logging, ideal when working with microservices.
bunyan-buddy sets up a local stream using bunyan-prettystream (https://github.com/MaximusHaximus/node-bunyan-prettystrea) and a remote stream using @google-cloud/logging-bunyan. You can set the log levels for each using environment variables or as options when initializing it. For testing Google Cloud Logging locally, you can manually auth with it using a service account file.
const log = require('bunyan-buddy')(
app: {
name: 'my-app-name', // defaults to 'app'
version: '1.0.0', // defaults to undefined
},
local_level: 'debug', // defaults to process.env.LOG_LEVEL_LOCAL or 'info'
remote_level: 'info', // defaults to process.env.LOG_LEVEL_REMOTE or not set
// optionally auth with google cloud logging
// defaults to not set (auth is automatic if hosted on Google Cloud Platform)
remote_auth: {
projectId: 'my-google-cloud-project',
keyFilename: '/path/to/gcloud-auth.json',
},
});
log.info('This is logged locally and to Google Cloud Logging!');
log.debug('This is only logged locally (with the above options)');
log.error('This will log an error locally and on Google Cloud Logging, but not Google Cloud Error Reporting');
log.error(new Error('This will log in Google Cloud Error Reporting only if hosted on Google Cloud Platform'));
FAQs
Reduce the amount of Bunyan boilerplate code required, ideal when working with microservices.
The npm package bunyan-buddy receives a total of 0 weekly downloads. As such, bunyan-buddy popularity was classified as not popular.
We found that bunyan-buddy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.