The npm package bs58-13 is a malicious package impersonating the popular base58 encoding library bs58. Instead of providing legitimate functionality, it requires a similarly named malicious dependency base65-13x. Installing bs58-13 results in the installation of this malicious dependency, which can lead to full system compromise. Any system with this package installed should be considered compromised, and all secrets and keys must be rotated immediately. Removal of the package alone may not eliminate the malicious presence due to potential persistent backdoors or additional malware.