
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
kibana-streamer
Advanced tools
This tool is handy for streaming logs from a specific application and/or task
This tool is handy for streaming logs that you are storing in ElasticSearch
To use this tool you must make sure that you have node installed on your machine, as well as having installed the dependencies for this tool.
Assuming you are running on Mac
$ brew install npm
$ make
$ ./bin/pull-logs -q "app.raw:spew"
{"method":"GET","path":"/","status":"200","size":"13","duration":0.000457428}
10.10.80.100 - - [16/Dec/2015:19:01:52 +0000] "GET / HTTP/1.0" 200 13 0.0009
{"method":"GET","path":"/","status":"200","size":"13","duration":0.000405188}
10.10.70.192 - - [16/Dec/2015:19:01:52 +0000] "GET / HTTP/1.0" 200 13 0.0010
{"method":"GET","path":"/","status":"200","size":"13","duration":0.000501326}
This utility comes with all sorts of useful features
$ ./bin/pull-logs --help
Usage: bin/pull-logs
Options:
-h, --help Show help [boolean]
-n, --number The max number of results ElasticSearch will return [default: 5]
-q, --query the query to perform in ElasticSearch [required]
-i, --instance-name prepend instance name to logs [boolean]
-t, --timestamp prepend timestamp to logs [boolean]
-f stream output as data is pumped into ElasticSearch [boolean]
-r, --refresh refresh rate for streaming output (ms) [default: 500]
Examples:
bin/pull-logs Pulls logs from kibana and formats output
FAQs
This tool is handy for streaming logs from a specific application and/or task
The npm package kibana-streamer receives a total of 0 weekly downloads. As such, kibana-streamer popularity was classified as not popular.
We found that kibana-streamer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.