
Security News
OpenClaw Skill Marketplace Emerges as Active Malware Vector
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.
@hyperdivision/heimdall-profile
Advanced tools
@hyperdivision/heimdall-profilePassword encrypted Heimdall profile storage
var HeimdallProfile = require('@hyperdivision/heimdall-profile')
HeimdallProfile.create(raf, password, settings, (err, profile) => {
if (err) throw err
profile.set('profile', {
name: 'Kim Doe',
title: 'CEO',
role: 'admin',
photo: Buffer.from('...')
}, HeimdallProfile.Profile)
profile.save((err) => {
if (err) throw err
})
})
HeimdallProfile.create(raf, password, settings, cb)Create a new Heimdall profile
HeimdallProfile.unlock(raf, password, cb)Unlock an existing Heimdall profile
HeimdallProfile.exists(raf, cb)Check if a Heimdall profile exists at raf and do corruption checks
HeimdallProfile.deriveKey(password, cb)Derives a INTERACTIVE key in memory returning (err, key, opts)
HeimdallProfile.compareKeys(password, key, opts, cb)Compare password with prederived key same options, returning (err, equals)
HeimdallProfile.trash(raf, cb)Unlock an existing Heimdall profile
HeimdallProfile.HeimdallKeysProtobuf definition of a Heimdall key set. Fields are:
{
localSecretKey: Buffer,
serverPublicKey: Buffer, // optional
localNoiseSecretKey: Buffer
}
HeimdallProfile.ProfileProtobuf definition of a standard Heimdall user profile. Fields are:
{
name: String,
title: String,
role: String,
photo: Buffer // optional
}
HeimdallProfile.SETTINGS_INTERACTIVEPredefined settings for creating a profile with high-entropy password.
This security level is appropiate for servers, scripts and bots that have their
password autogenerated and supplied automatically.
HeimdallProfile.SETTINGS_SENSITIVEPredefined settings for creating a profile with a modest entropy password.
This security level is appropiate for humans that are supplying a password of
their own choice.
profile.get(key, [encoding = 'json'])Get a key stored in the Heimdall profile, with optional encoding
profile.set(key, value, [encoding = 'json'])Set a key stored in the Heimdall profile, with optional encoding
profile.has(key)Check a key stored in the Heimdall profile, with optional encoding
profile.lock([autoSave = false], cb)Lock profile, optionally saving ephemeral state, and then wiping all ephemeral
state. The profile instance becomes unusable after locking.
profile.destory(cb)Forcibly destroy the profile instance
profile.trash(cb)DANGEROUS
Destroy profile and wipe all data from ephemeral and persistent storage.
profile.on('locking')Emitted before locking to disk, giving listeners the opportunity to modify their values or change state.
profile.on('saving')Emitted before saving to disk, giving listeners the opportunity to modify their values or change state.
npm install @hyperdivision/heimdall-profile
FAQs
Password encrypted Heimdall profile storage
We found that @hyperdivision/heimdall-profile demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.