bs58-13 @6.0.1
Vulnerability report · Last retrieved from osv.dev August 13, 2026 at 4:27 AM UTC
OSV ID
MAL-2026-13760
Ecosystem
npm
Summary
Package name, README, and keywords mirror the popular base58 encoding library bs58, but the main module contains only require("base65-13x") and re-exports its result. The declared runtime dependency base65-13x is a name-lookalike of the genuine base-x library that bs58 normally depends on. The wrapper itself declares no lifecycle scripts and performs no network I/O, filesystem access, or shell execution; installing this package resolves and loads base65-13x in place of base-x.
Source: amazon-inspector (981f5e55b471c2c102357ab650c3fdb6b27d4ab30001be83c532c819c1be350f)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.