
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
bunyan-pilgrim
Advanced tools
Pilgrim is a logging stream for trentm's node-bunyan module designed to work in conjunction with mcavage's node-restify server.
It allows you to direct a specific range of status codes to individual log files. For example, you can easily separate all client errors (4xx) from server errors (5xx) and successful requests (2xx) into a separate file for each category.
You can also ignore specific error codes, giving you greater control over your logging operations.
npm install bunyan-pilgrim
var bunyan = require('bunyan');
var Pilgrim = require('bunyan-pilgrim');
var logger = bunyan.createLogger({
name: 'Pilgrim Test',
streams: [
{
level: 'info',
stream: new Pilgrim({
from: 400,
to: 499,
stream: '/var/log/app-client-errors.log',
ignore: [401]
})
},
{
level: 'info',
stream: new Pilgrim({
from: 500,
to: 599,
stream: '/var/log/app-server-errors.log'
})
}
]
});
server = restify.createServer({
log: logger,
});
Each Pilgrim is configured with a hash that includes the following:
from
: the first status code that must be captured in this logto
: the last status code that msut be captured in this logstream
: either a string containing the path of the log file, or an instance of Stream.Writable.ignore
: an optional array of status codes that fall between from
and to
but should be ignored anyway.Contributions are welcome… particularly if accompanied by a unit test.
FAQs
A REST-oriented logger for Bunyan
The npm package bunyan-pilgrim receives a total of 0 weekly downloads. As such, bunyan-pilgrim popularity was classified as not popular.
We found that bunyan-pilgrim demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.