
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
const log = require("xxd-log");
// Different log levels
// Accept same arguments as `console.log()`
const count = 5;
log.trace("count: %d", count);
log.debug("count:", count);
log.info(`count: ${count}`);
log.warn({ count });
log.error(new Error(`count (${count}) is wrong.`));
log.fatal("Duang!");
// Use chalk directly
console.log(log.chalk.red("This is red."));
// Change options of the default logger instance.
log.withLabel = false; // Do not display labels before messages.
log.withTimestamp = false; // Do not display current time before messages.
log.highlightStackTrace = false; // Do not highlight key positions in error stack trace.
log.timestampFormat = "HH:mm:ss.SSS"; // Customize the time format.
log.withLabel = log.defaultOptions.withLabel; // reset an option to default value.
// Use an individual instance with different options
const anotherLogger = log.newLogger({
withLabel: false,
withTimestamp: false,
highlightStackTrace: false,
});
You can change these options at any time in the process, and will take effect from next call of logging.
For further instruction of time format, please see moment.js documentation
Option | Type | Description |
---|---|---|
withTimestamp | boolean | Control if print message with timestamp before, default to true |
withLabel | boolean | Control if print message with label (indicating log level) before, default to true |
timestampFormat | string | Define how timestamp looks like, see moment.format() (http://momentjs.com/docs/#/displaying/format/), default to 'YYYY-MM-SS HH:mm:ss' |
highlightStackTrace | string | Control if highlight files in project (in process.cwd() , and not in node_modules ) in error stack trace. default to true |
12.4.0
6.0.0
4.0.0
with --harmony
FAQs
Simple console logger with colors and levels.
The npm package xxd-log receives a total of 15 weekly downloads. As such, xxd-log popularity was classified as not popular.
We found that xxd-log demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.