registry / bs58-33 / 6.0.1

bs58-33@6.0.1

Base 58 encoding / decoding

AI Security Review

scanned 1d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime code only exports a Base58 codec; no network, filesystem, shell, or install-time behavior is present.

Static reason

No blocking static signals were detected.

Trigger

Consumer imports or requires the package.

Impact

No malicious impact established.

Mechanism

Constructs a Base58 encoder/decoder from a fixed alphabet.

Rationale

Direct inspection found a minimal codec wrapper with no lifecycle scripts or concrete attack behavior. The unusual dependency name alone is insufficient to establish malicious behavior from this package's source.

Evidence

package.jsonsrc/cjs/index.cjssrc/esm/index.jsREADME.md

OSV Corroboration

OpenSSF/OSV

Advisory

MAL-2026-14017

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in bs58-33 (npm)

Details

npm/bs58-33 is a typosquat of the popular bs58 base58 codec (cryptocoinjs). The package contains no malicious code of its own: its src/cjs/index.cjs simply does require("base65-33x") and re-exports it. Its sole purpose is to pull in the malicious sink package base65-33x as a runtime dependency (declared dependency: base65-33x: ^5.0.1). base65-33x is a near-verbatim clone of base-x whose decode() exfiltrates every string passed to it by POSTing the raw input to a hardcoded bare-IP C2 (http://168.231.81.80:3002/api/log) before throwing; because base-x/bs58 are how crypto tooling base58-decodes private keys and seeds, the exfiltrated values are frequently secrets. The sink is reported separately as MAL-2026-13749. bs58-33 and its sibling wrappers (bs58-15, bs58-77) were published alongside the three base65 sinks by a single npm maintainer account (smallmantis) within a ~90-minute window on 2026-08-11, forming a matched six-package delivery-plus-exfiltration campaign. Installing bs58-33 is sufficient to introduce the key-exfiltration behavior into a dependent project.

References

OSV advisory PACKAGE ADVISORY WEB

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with low false-positive risk.

Evidence for block

Both published entrypoints only create and export a Base58 codec using a fixed alphabet.
Manifest exports only the CJS and ESM codec entrypoints and has no lifecycle hook.

Evidence against

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 540 B of source

Source & flagged code

1 flagged

src/esm/index.jsView file

Lines 1-4javascript

1import basex from 'base65-33x';

2var ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';

3export default basex(ALPHABET);

High

Ai Review Evidence

Both published entrypoints only create and export a Base58 codec using a fixed alphabet.

src/esm/index.jsView on unpkg · L1

Source & flagged code

1 flagged · loading source

src/esm/index.jsView file

1import basex from 'base65-33x'; var ALPHABET = '[redacted]'; export default basex(ALPHABET);

High

Ai Review Evidence

Both published entrypoints only create and export a Base58 codec using a fixed alphabet.

src/esm/index.jsView on unpkg · L1

Findings

1 High2 Low

HighAi Review Evidencesrc/esm/index.js

LowScripts Present

LowHigh Entropy Strings