
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
file-timestamp-stream
Advanced tools
This module creates stream.Writable to a file which is automatically rotated based on current time.
npm install file-timestamp-stream
Additionally for Typescript:
npm install -D @types/node
Example:
const FileTimestampStream = require('file-timestamp-stream')
Typescript:
import FileTimestampStream from 'file-timestamp-stream'
newFilename
is a custom function with path as an only argument which
returns new filename (default: returns new filename based on path and current
time)flags
is a string with
flags
for opened stream (default: 'a'
)fs
is a custom fs module (optional)path
is a template for new filenames (default: 'out.log'
)Example:
Basic path based on strftime
parameters:
const stream = new FileTimestampStream({
path: '%Y-%m-%dT%H.log',
flags: 'a'
})
Custom filename generator:
const strftime = require('ultra-strftime')
// count how many files was created
let counter = 0
const stream = new FileTimestampStream({
path: '%Y-%m-%dT%H:%M.log',
newFilename
})
function newFilename (path) {
const filename = strftime(path)
if (filename !== stream.currentFilename) counter++
return filename
}
currentFilename
contains last opened filenamestream
contains
fs.WriteStream
objectPath can contain strftime specifiers.
Copyright (c) 2017-2018 Piotr Roszatycki piotr.roszatycki@gmail.com
FAQs
Writing stream with file rotating based on timestamp
The npm package file-timestamp-stream receives a total of 297 weekly downloads. As such, file-timestamp-stream popularity was classified as not popular.
We found that file-timestamp-stream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.