Malicious code in bs58-15 (npm)

Source: amazon-inspector 99502d2feb4743e651628a07ca032fa0cc813ff6482cae15d9c2f1fb6fce63c4 Package name 'bs58-15' impersonates the widely-used 'bs58' base58 encoding library, and its package.json metadata repository, homepage, bugs points at the legitimate cryptocoinjs/bs58 project despite being...

Malicious code in base65-15x (npm)

Source: amazon-inspector 00fcb69b2f5c7e64ede8df36e3865dad82632ef076c6c2974b568727ec046062 base65-15x is a typosquat of the base-x package. Its decode function does not perform base decoding; instead it POSTs the caller-supplied string argument to the hardcoded endpoint...

Malicious Package

Overview base65-15x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

bs58-15 (6.0.1) potentially affected by unknown CVE via base65-15x (5.0.2)

base65-15x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-15x and may be impacted: - bs58-15 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6515X-18616640...

bs58-15 (6.0.1) potentially affected by unknown CVE via base65-15x (5.0.2)

base65-15x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-15x and may be impacted: - bs58-15 6.0.1 Source cves: unknown CVE Source advisory: GHSA-M962-7HQX-P4H8...

Malicious code in base65-15x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fcb69b2f5c7e64ede8df36e3865dad82632ef076c6c2974b568727ec046062 base65-15x is a typosquat of the base-x package. Its decode function does not perform base decoding; instead it POSTs the caller-supplied string...

MAL-2026-13748 Malicious code in base65-15x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fcb69b2f5c7e64ede8df36e3865dad82632ef076c6c2974b568727ec046062 base65-15x is a typosquat of the base-x package. Its decode function does not perform base decoding; instead it POSTs the caller-supplied string...

bs58-15 (6.0.1) potentially affected by unknown CVE via base65-15x (5.0.2)

base65-15x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-15x and may be impacted: - bs58-15 6.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13748...