Malicious code in hd-wallet-generator (RubyGems)

Source: amazon-inspector 5d6925082b6aa5db29d0569324b4485976add2368c78635d4be5c52270ee3771 The gem's declared native extension build script ext/hdwalletgenerator/extconf.rb executes a Base64-encoded payload via eval during gem install. The decoded payload opens a TCP socket to the hardcoded remote...