
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
cloudwatch-logger
Advanced tools
This AWS CloudWatch logger library is designed to support the use case where apps don't necessarily run continuously, therefore needing to exit after all work has been completed. It is meant to be a thin wrapper around the AWS SDK's CloudWatchLogs
class with an API similar to console.log
, but asynchronous by leveraging Promises.
npm install cloudwatch-logger --save
With ES2017's async-await syntax, using cloudwatch-logger
is as simple as:
const CloudWatchLogger = require('cloudwatch-logger');
// this Logger assumes an existing logGroup,
// but creates a new logStream
const config = {
accessKeyId: '<AWS accessKeyId>',
secretAccessKey: '<AWS secret>',
region: '<AWS region>',
logGroupName: '<myLogGroup>',
logStreamName: '<myLogStream>',
// optional (for temporary credentials)
sessionToken: '<mySessionToken>',
};
const logger = new CloudWatchLogger(config);
// let's make an async IIF so we can `await`
(async () => {
// the connect() method returns the logger instance itself
// and creates a new logStream
await logger.connect();
/* logResult is the response object returned by CloudWatchLogs API `putLogEvents` method, see:
* http://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/CloudWatchLogs.html#putLogEvents-property
*
* the messages are bundled into a single `putLogEvents` call with timestamps set to current UNIX time
*/
const logResult = await logger.log('Message1', { objects: 'are serialised to JSON' }, 123);
// we can access the underlying AWS SDK CloudWatchLogs object if we want to do fancy things
const CloudWatchLogs = logger.getAWSObject();
// … fancy things …
})();
FAQs
Asynchronous logs from node.js to AWS CloudWatch
We found that cloudwatch-logger demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.