The bs58-13 npm package is a malicious clone of the legitimate bs58 library. Its main module does not implement base58 encoding but instead requires and re-exports a malicious dependency named base65-13x, which mimics the name of the genuine base-x library normally used by bs58. The wrapper package itself does not perform lifecycle scripts or network, filesystem, or shell operations, but installing it causes the malicious base65-13x package to be loaded, potentially compromising the host system. This package is identified as fully compromising any computer on which it is installed.

Systems with bs58-13 installed are considered fully compromised. Attackers may have gained full control, risking exposure of all stored secrets and keys. The compromise may include persistent malicious software beyond the package itself, making simple removal insufficient to restore system integrity.

Remove the bs58-13 package immediately. Rotate all secrets and keys from a separate, uncompromised system. Because full system compromise is likely, conduct a thorough incident response and forensic analysis to identify and eradicate any persistent malicious components. There is no official patch or fix; the package should be avoided entirely.