
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
📝 A simple, lightweight and customizable logger.
Loggaby is the simple, lightweight and minimal logger.
It has 1 goal and strives for it well: Posting nice looking logs to your terminal (or wherever you want, see the examples for details)
How it looks for default.
PS: It's also customizable (highly so)! From how it looks, to the log destination.
npm install loggaby
Or with Yarn:
yarn add loggaby
The Loggaby constructor, which creates a new Loggaby
instance.
options
{Object}
debug
{Boolean | String} Whether to print debug messages. Can be a boolean or 'auto'
. (Default: true
)format
{String} Format for how logs should look (Default: '{grey}{time}{reset} {level} > '
)levels
{Object[]} Additional custom levels to provide.
name
{String} Name of the level that appears in the logs.color
{String} Color of the level name. Accepted values are a hex value or named colors.debug
{Boolean} Whether this level will be hidden when options.debug
is false.fatal
{Boolean} Whether to make the level name and message bold and underline (to be noticeable).call
{String} Name of the function to use this level.transports
{Object[]} (An array of objects or specifically transport instances) What transports to log to. An example is provided above. (Default: [TerminalTransport]
)debug
, log
, warn
, error
and fatal
You can log with Loggaby.<Level>()
.
Loggaby is licensed under the MIT license.
Read here for more info.
A Luvella project.
FAQs
📝 A simple, lightweight and customizable logger.
The npm package loggaby receives a total of 2 weekly downloads. As such, loggaby popularity was classified as not popular.
We found that loggaby demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.