diff --git a/contrib/package/nix/deps/hash-wasm/default.nix b/contrib/package/nix/deps/hash-wasm/default.nix
new file mode 100644
index 00000000..52cab034
--- /dev/null
+++ b/contrib/package/nix/deps/hash-wasm/default.nix
@@ -0,0 +1,21 @@
+{ fetchzip, breakpointHook, stdenvNoCC }: stdenvNoCC.mkDerivation rec {
+  # The build script for this uses docker, so let's just use the release tarball
+  name = "hash-wasm";
+  version = "4.12.0";
+
+  src = fetchzip {
+    url = "https://github.com/Daninet/hash-wasm/releases/download/v${version}/hash-wasm@${version}.zip";
+    hash = "sha256-bjHpMzOXPCoKVoucVY7CXZ70vPtn8+UXMxBD7KOHg2k=";
+  };
+
+  dontBuild = true;
+
+  installPhase = ''
+      mkdir $out
+      cp $src/* -r --target-directory=$out
+    '';
+
+  nativeBuildInputs = [ breakpointHook ];
+
+  npmDepsHash = "sha256-S9g8YlrsD7t0y9qi/CsN7qHZcT/TDfC1XxiArSGjAe4=";
+}
diff --git a/contrib/package/nix/overlay.nix b/contrib/package/nix/overlay.nix
index bcbcf0e7..4b4bb103 100644
--- a/contrib/package/nix/overlay.nix
+++ b/contrib/package/nix/overlay.nix
@@ -10,6 +10,7 @@ final: prev: {
   busy-mp3 = final.callPackage ./deps/busy-mp3 { };
   copyparty-fonts = final.callPackage ./deps/copyparty-fonts { };
   asmcrypto = final.callPackage ./deps/asmcrypto { };
+  hash-wasm = final.callPackage ./deps/hash-wasm { };
 
   python3 = prev.python3.override {
     packageOverrides = pyFinal: pyPrev: {