CVE-2026-46412

@beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS Identity Server with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of @beproduct/nestjs-auth 0.1.2 through 0.1.19. The...

CVE-2026-46412

creationtimestamp| type| source ---|---|--- 2026-07-20 15:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3maqdnr62y 2026-07-20 17:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rgjhohk2g 2026-07-20 17:33:08+00:00| seen|...