
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@quicore/hash
Advanced tools
A lightweight utility for fast access to the most commonly used hashing algorithms including SHA, Blake2, and PBKDF2
A lightweight utility for fast access to the most commonly used hashing algorithms including SHA, Blake2, and PBKDF2.
@quicore/hash provides a simple and unified interface to widely-used cryptographic hashing functions. It wraps Node.js' native crypto module to offer convenient helpers for generating SHA, BLAKE2, SHA3, PBKDF2, and other hashes, as well as Base62-encoded compact IDs.
npm install @quicore/hash
import { GenerateHash } from '@quicore/hash';
// SHA-256
const sha = GenerateHash.SHA256('hello');
// Compact ID (Base62 encoded Blake2b hash)
const id = GenerateHash.compactHash('user@example.com');
// PBKDF2
const derivedKey = GenerateHash.PBKDF2('password123', 'random-salt');
// SHA3-256
const sha3 = GenerateHash.SHA3_256('some input');
| Method | Description |
|---|---|
| SHA256(input) | Generates a SHA-256 hex hash |
| SHA512(input) | Generates a SHA-512 hex hash |
| SHA1(input) | ⚠️ Deprecated. SHA-1 hash |
| MD5(input) | ⚠️ Deprecated. MD5 hash |
| SHA3_256(input) | SHA3-256 hex hash |
| SHA3_512(input) | SHA3-512 hex hash |
| RIPEMD160(input) | RIPEMD160 hex hash |
| BLAKE2s256(input) | BLAKE2s-256 hex hash |
| blake2b(input, size) | Returns a Buffer from BLAKE2b hash |
| PBKDF2(password, salt) | PBKDF2 w/ SHA-512 (100,000 iterations, 64 bytes) |
| Method | Description |
|---|---|
| compactHash(input, len) | Returns Base62-encoded BLAKE2b digest |
| toBase62(buffer, len) | Encodes Buffer to Base62 string of given length |
These are retained for non-security use cases (e.g., checksum comparisons) but are not recommended for cryptographic use.
const id = GenerateHash.compactHash('file_upload_123');
// e.g., "03xr9SDcKVUuAkcBfYzLpT"
MIT
FAQs
A lightweight utility for fast access to the most commonly used hashing algorithms including SHA, Blake2, and PBKDF2
We found that @quicore/hash demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.