bs58-11 @6.0.1

Summary

Package bs58-11 is published under a name that resembles the popular bs58 module. Its README self-identifies as bs58 and instructs npm i --save bs58 , while package.json declares the name as bs58-11 . The tarball contains only a two-line wrapper ( index.cjs ) that require s base65-11x — a name resembling the legitimate base-x package — and immediately invokes its default export at module load. The wrapper itself contains no exfiltration, credential access, install-time fetch-and-execute, silent-relay, or backdoor code. Any behavior beyond base-x-style alphabet decoding depends on the content of the base65-11x dependency, which is not part of this tarball.

Source: amazon-inspector (af29bcf6fea2d386f8beb757fa38bac5f1cc6dbae984795f5fd1f4356afd83f7)