Malicious code in @zzzgenesis00/hd-key-generator (npm)

Source: amazon-inspector 6d1bce1ae0778169c4e5fb37721dfcc052c984efc60a257166adb4d20e2d39e5 @zzzgenesis00/hd-key-generator ships a postinstall.js that runs automatically on npm install. It enumerates /.ssh, /.npmrc, /.gitconfig, browser profile artifacts Chrome/Firefox cookies, Login Data, key4.db,...

Malicious code in hd-key-generator (npm)

Source: amazon-inspector 3a102f1d05a0bd89af765e457c2b5d6121ec831d33549d0cbf9795d58b0d3ee6 hd-key-generator is a typosquat of the hdkey package. On require, index.js reads process.env, os.hostname, os.userInfo.username, the user's home directory, platform, cwd, and package metadata, JSON-serialize...

MAL-2026-13345 Malicious code in hd-key-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a102f1d05a0bd89af765e457c2b5d6121ec831d33549d0cbf9795d58b0d3ee6 hd-key-generator is a typosquat of the hdkey package. On require, index.js reads process.env, os.hostname, os.userInfo.username, the user's home...

MAL-2026-12121 Malicious code in @zzzgenesis00/hd-key-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1bce1ae0778169c4e5fb37721dfcc052c984efc60a257166adb4d20e2d39e5 @zzzgenesis00/hd-key-generator ships a postinstall.js that runs automatically on npm install. It enumerates /.ssh, /.npmrc, /.gitconfig, browser...

MAL-2026-12095 Malicious code in @wethenorth12/hd-key-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2e832840746236ecbc71ba886ec793620dd508cd2a75eca04bd44e575cb03b @wethenorth12/hd-key-generator markets itself as a drop-in replacement for the popular hdkey wallet library. On require, index.js reads the full...

Malicious code in @wethenorth12/hd-key-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2e832840746236ecbc71ba886ec793620dd508cd2a75eca04bd44e575cb03b @wethenorth12/hd-key-generator markets itself as a drop-in replacement for the popular hdkey wallet library. On require, index.js reads the full...

Malicious Package

Overview hd-key-generator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...