Malicious code in bs58-33 (npm)

npm/bs58-33 is a typosquat of the popular bs58 base58 codec cryptocoinjs. The package contains no malicious code of its own: its src/cjs/index.cjs simply does require"base65-33x" and re-exports it. Its sole purpose is to pull in the malicious sink package base65-33x as a runtime dependency declar...

bs58-33 (6.0.1) potentially affected by unknown CVE via base65-33x (5.0.2)

base65-33x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-33x and may be impacted: - bs58-33 6.0.1 Source cves: unknown CVE Source advisory: GHSA-Q6WG-MGQ7-RQ2H...

Malicious Package

Overview base65-33x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

bs58-33 (6.0.1) potentially affected by unknown CVE via base65-33x (5.0.2)

base65-33x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-33x and may be impacted: - bs58-33 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6533X-18616644...

Malicious code in base65-33x (npm)

Source: amazon-inspector f4e22e29bf42b32b80c5336d5f38d10d96879c84f162d86565289b588253589b Package name resembles the popular base-x encoder/decoder. The exported decodestring function in both CJS and ESM entrypoints POSTs its caller-supplied input to the hardcoded bare-IP endpoint...

MAL-2026-13749 Malicious code in base65-33x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e22e29bf42b32b80c5336d5f38d10d96879c84f162d86565289b588253589b Package name resembles the popular base-x encoder/decoder. The exported decodestring function in both CJS and ESM entrypoints POSTs its caller-suppli...

Malicious code in base65-33x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e22e29bf42b32b80c5336d5f38d10d96879c84f162d86565289b588253589b Package name resembles the popular base-x encoder/decoder. The exported decodestring function in both CJS and ESM entrypoints POSTs its caller-suppli...

bs58-33 (6.0.1) potentially affected by unknown CVE via base65-33x (5.0.2)

base65-33x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-33x and may be impacted: - bs58-33 6.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13749...