Malicious code in bs58-77 (npm)

npm/bs58-77 is a typosquat of the popular bs58 base58 codec cryptocoinjs. The package contains no malicious code of its own: its src/cjs/index.cjs simply does require"base65-77x" and re-exports it. Its sole purpose is to pull in the malicious sink package base65-77x as a runtime dependency declar...

MAL-2026-14018 Malicious code in bs58-77 (npm)

npm/bs58-77 is a typosquat of the popular bs58 base58 codec cryptocoinjs. The package contains no malicious code of its own: its src/cjs/index.cjs simply does require"base65-77x" and re-exports it. Its sole purpose is to pull in the malicious sink package base65-77x as a runtime dependency declar...

Malicious code in base65-77x (npm)

Source: amazon-inspector ef76e83f2641fcfacf488a6ef61447fac81f6a24cff6287b407a385374b9ddf7 The package impersonates base-x name, description, keywords, and homepage copied from base-x and patches the advertised decode function in both the CommonJS and ESM entrypoints to POST the caller-supplied...

bs58-77 (6.0.1) potentially affected by unknown CVE via base65-77x (5.0.2)

base65-77x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-77x and may be impacted: - bs58-77 6.0.1 Source cves: unknown CVE Source advisory: GHSA-72RX-9QC9-2C73...

bs58-77 (6.0.1) potentially affected by unknown CVE via base65-77x (5.0.2)

base65-77x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-77x and may be impacted: - bs58-77 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6577X-18616641...

Malicious Package

Overview base65-77x is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in base65-77x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef76e83f2641fcfacf488a6ef61447fac81f6a24cff6287b407a385374b9ddf7 The package impersonates base-x name, description, keywords, and homepage copied from base-x and patches the advertised decode function in both the...

MAL-2026-13750 Malicious code in base65-77x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef76e83f2641fcfacf488a6ef61447fac81f6a24cff6287b407a385374b9ddf7 The package impersonates base-x name, description, keywords, and homepage copied from base-x and patches the advertised decode function in both the...

bs58-77 (6.0.1) potentially affected by unknown CVE via base65-77x (5.0.2)

base65-77x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-77x and may be impacted: - bs58-77 6.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13750...