beproduct-org-nestjs-auth vulnerabilities
1 known vulnerability in beproduct-org-nestjs-auth from BeProduct. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest first
- 10.0 Critical severity
beproduct-org-nestjs-auth: Embedded Malicious Code
@beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS (Identity Server) with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of `@beprodu