bs58-12 @6.0.1

Summary

Package bs58-12 presents itself as the popular bs58 base58 library (README copied from bs58, advertising npm i --save bs58 ) but its own code is a thin wrapper: index.js does require("base65-12x") and the sole declared runtime dependency is base65-12x at ^5.0.1, a name resembling the base-x library the real bs58 uses. The package under analysis contains no exfiltration, credential access, install/import-time destructive action, or lifecycle scripts; the only installer-facing behavior is pulling in base65-12x as a dependency. Whether installing bs58-12 causes harm depends on the code shipped by base65-12x, which is a separate package not analyzed here.

Source: amazon-inspector (4d59b2d561269e6779eed82e12abe726403e9a2419936c01a4deaea9c3e70b2c)