Malicious code in hdkey-derive-helper (RubyGems)

Source: amazon-inspector 04f5409730ece37713b6a8d3afddcce30744e213b80759f7ae89478731b0264a The gem presents itself as a BIP32/mnemonic derivation helper but ships only a wordlist stub and a 56-byte empty C file ext/hdkey-derive-helper/hdkey-derive-helper.c, body void InitHdkeyDeriveHelpervoid...

Malicious Package

Overview hdkey-derive-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in hdkey-derive-helper (RubyGems)

RubyGems runs this gem's native extension script ext/hdkey-derive-helper/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 3...

MAL-2026-17602 Malicious code in hdkey-derive-helper (RubyGems)

RubyGems runs this gem's native extension script ext/hdkey-derive-helper/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 3...