
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
remotelogger
Advanced tools
This server is able to receive logs from javascript remote application
Remote Logger is a node module able to handle request with strings and to put in a log file and the console. The JavaScript sample client code is based on Aria-Templates scripts and a standard JavaScript one.
npm install -g remotelogger
remotelogger
Here is the URL to do a remote log :
curl http://localhost:8666/log/?classname=com.mycompany.test&log=This is my log message message&sev=DEBUG&logdate=1426844546265&depth=4&senddate=1426844546265
{
cl : "ClassName or identifier of the javascript that did the log",
log : "Log Message",
logdate : "Date of the log (as we are queuing the message to ensure the order of reception)",
depth : "Depth of the call stack not used ",
senddate:"Date when the log was send from the client (Must be UTC time so we can calculate the request time)",
sev : "The severity of the log [DEBUG,INFO,ERROR,WARN]"
}
open http://localhost:8666/www/ you will land on an interface allowing to see the log in web mode (search tool from the browser) and also see the occurency of call of a class (identifier). If you add a "Entering" keyword in your log in each of first line of your function, it will be able to draw a sequence diagram.
remotelogger --filter mainpage
Only logs containing mainpage will be displayed
remotelogger --logfile myfile.log
The web part of the remote logger can use firebase for live update.
remotelogger --firebase https://YOURURL.firebaseio.com
On OSX we have to link node installation as it is in linux system.
Web application is slow on huge amount of data TODO : improve it.
sudo ln -s /usr/local/bin/node /usr/bin/node
FAQs
This server is able to receive logs from javascript remote application
The npm package remotelogger receives a total of 0 weekly downloads. As such, remotelogger popularity was classified as not popular.
We found that remotelogger demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.