
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
nuxt3-winston-log
Advanced tools
nuxt3-winston-log is a Nuxt 3.x modules to add winston-powered logging to your Nuxt application
By default the following events are captured:
just simple use console.log to log info level and console.error to log error level
$ yarn add nuxt3-winston-log # or npm i nuxt3-winston-log
nuxt.config.js file to add module{
modules: ["nuxt3-winston-log"];
}
nuxt3WinstonLog key as needed. See Usage section for details.By default, nuxt3-winston-log exposes some basic options for common needs.
The default values are:
// ...
{
// Maximum size of the file after which it will log
// This can be a number of bytes, or units of kb, mb, and gb
// If using the units, add 'k', 'm', or 'g' as the suffix. The units need to directly follow the number
maxSize: "1024m",
// Maximum number of logs to keep. If not set, no logs will be removed. This can be a number of files or number of days
// If using days, add 'd' as the suffix. It uses auditFile to keep track of the log files in a json format
// It won't delete any file not contained in it. It can be a number of files or number of days
maxFiles: "14d",
// Path that info log files will be created in.
// Change this to keep things neat.
infoLogPath: `./logs`,
// Name of info log file.
// Change this to keep things tidy.
infoLogName: `%DATE%-${process.env.NODE_ENV}-info.log`,
// Path that error log files will be created in.
// Change this to keep things neat.
errorLogPath: `./logs`,
// Name of error log file.
// Change this to keep things tidy.
errorLogName: `%DATE%-${process.env.NODE_ENV}-error.log`,
// Set to `true` to skip auto render:html logging (level: info).
skipRequestMiddlewareHandler: false,
}
// ...
Example in your apps ~/nuxt.config.js file:
export default defineNuxtConfig({
modules: ["nuxt3-winston-log"],
nuxt3WinstonLog: {
maxSize: "2048m",
maxFiles: "30d",
},
});
FAQs
nuxt3-winston-log
The npm package nuxt3-winston-log receives a total of 493 weekly downloads. As such, nuxt3-winston-log popularity was classified as not popular.
We found that nuxt3-winston-log demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.