The address is the double hash of the hierarchically derived public key using BIP32 key derivation. To be able to compute multiple addresses the master public key is used in the computer's memory that may contain malicious code.