
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
winston-mysql
Advanced tools
MySQL transport plugin for winston@3.x logger
This MySQL transport module is a plugin for winston@3.x logger running in node.js.
Current version plugin supports Winston@3.x.
Please check test/test.js for demo usage
const options_default = {
host: 'localhost',
user: 'logger',
password: 'logger*test',
database: 'WinstonTest',
table: 'sys_logs_default'
};
//custom log table fields
const options_custom = {
host: 'localhost',
user: 'logger',
password: 'logger*test',
database: 'WinstonTest',
table: 'sys_logs_custom',
fields: {level: 'mylevel', meta: 'metadata', message: 'source', timestamp: 'addDate'}
};
//meta json log table fields
const options_json = {
host: 'localhost',
user: 'logger',
password: 'logger*test',
database: 'WinstonTest',
table: 'sys_logs_json'
};
const logger = winston.createLogger({
level: 'debug',
format: winston.format.json(),
defaultMeta: { service: 'user-service' },
transports: [
new winston.transports.Console({
format: winston.format.simple(),
}),
// or use: options_custom / options_json
new winstonMysql(options_default),
],
});
const rnd = Math.floor(Math.random() * 1000);
const msg = `test message ${rnd}`;
logger.debug(msg, {message: msg, type: 'demo'});
logger.error(msg, {message: msg, type: 'demo'});
logger.info(msg, {message: msg, type: 'demo'});
logger.warn(msg, {message: msg, type: 'demo'});
You should create a table in the database first.
Demos:
CREATE TABLE `WinstonTest`.`sys_logs_default` (
`id` INT NOT NULL AUTO_INCREMENT,
`level` VARCHAR(16) NOT NULL,
`message` VARCHAR(2048) NOT NULL,
`meta` VARCHAR(2048) NOT NULL,
`timestamp` DATETIME NOT NULL,
PRIMARY KEY (`id`));
# or
CREATE TABLE `WinstonTest`.`sys_logs_custom` (
`id` INT NOT NULL AUTO_INCREMENT,
`mylevel` VARCHAR(16) NOT NULL,
`source` VARCHAR(1024) NOT NULL,
`metadata` VARCHAR(2048) NOT NULL,
`addDate` DATETIME NOT NULL,
PRIMARY KEY (`id`));
If you already have the log table, you can set custom fields for this module.
//custom log table fields
const options_custom = {
host: 'localhost',
user: 'logger',
password: 'logger*test',
database: 'WinstonTest',
table: 'sys_logs_custom',
fields: {level: 'mylevel', meta: 'metadata', message: 'source', timestamp: 'addDate'}
};
You can use the JSON format meta field in MySQL database table. That is great for searching & parsing, but it only supports MySQL 5.7+.
CREATE TABLE `WinstonTest`.`sys_logs_json` (
`id` INT NOT NULL AUTO_INCREMENT,
`level` VARCHAR(16) NOT NULL,
`message` VARCHAR(2048) NOT NULL,
`meta` JSON NOT NULL,
`timestamp` DATETIME NOT NULL,
PRIMARY KEY (`id`));
Install via npm:
$ npm install winston-mysql
Head over to https://github.com/charles-zh/winston-mysql
Install docker & docker-compose. Enter test directory and run:
docker-compose up
Then:
Open browser and visit: 127.0.0.1:8080.
Login using user & password in docker-compose.yml
Create Tables using SQL commands above.
$ npm run test
charles-zh
FAQs
MySQL transport plugin for winston@3.x logger
We found that winston-mysql demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.