
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
winston-posix-syslog
Advanced tools
A Syslog transport for winston using posix.
$ npm install winston
$ npm install winston-posix-syslog
The winston-syslog transport is amazing, but it only capable of communicating with syslog using udp or tcp. I needed something in my environment that uses the C bindings.
To use the PosixSyslog transport in winston, you simply need to require it and then either add it to an existing winston logger or pass an instance to a new winston logger:
var winston = require('winston');
var PosixSyslog = require('winston-posix-syslog').PosixSyslog;
winston.add(PosixSyslog, options);
winston.log('info', 'I AM the one who knocks.');
The PosixSyslog transport takes the following options:
process.title
).local0
).true
).true
).true
).true
).false
).Because syslog only allows a subset of the levels available in winston, levels that do not match will be ignored. Therefore, in order to use winston-posix-syslog
effectively, you should indicate to winston that you want to use the syslog levels:
var winston = require('winston');
winston.setLevels(winston.config.syslog.levels);
The PosixSyslog
transport will only log to the level that are available in the syslog protocol. These are (in increasing order of severity):
FAQs
A syslog transport for winston that uses posix
The npm package winston-posix-syslog receives a total of 3 weekly downloads. As such, winston-posix-syslog popularity was classified as not popular.
We found that winston-posix-syslog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.