MAL-2026-13964 Malicious code in bs58-15 (npm)

npm/bs58-15 is a typosquat of the popular bs58 base58 codec cryptocoinjs. The package contains no malicious code of its own: its src/cjs/index.cjs simply does require"base65-15x" and re-exports it. Its sole purpose is to pull in the malicious sink package base65-15x as a runtime dependency declar...

Malicious code in bs58-15 (npm)

npm/bs58-15 is a typosquat of the popular bs58 base58 codec cryptocoinjs. The package contains no malicious code of its own: its src/cjs/index.cjs simply does require"base65-15x" and re-exports it. Its sole purpose is to pull in the malicious sink package base65-15x as a runtime dependency declar...

bs58-15 (6.0.1) potentially affected by unknown CVE via base65-15x (5.0.2)

base65-15x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-15x and may be impacted: - bs58-15 6.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-BASE6515X-18616640...

bs58-15 (6.0.1) potentially affected by unknown CVE via base65-15x (5.0.2)

base65-15x NPM version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on base65-15x and may be impacted: - bs58-15 6.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13748...