CVE-2026-46412
1 advisory.
npm/@beproduct/nestjs-auth CVE-2026-46412: critical 10, EPSS 0.77%
Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.2 | - | 0.1.19 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-6xwp-cp5h-q856
- https://github.com/BeProduct/beproduct-org-nestjs-auth/security/advisories/GHSA-6xwp-cp5h-q856
- https://github.com/BeProduct/beproduct-org-nestjs-auth
- https://www.aikido.dev/blog/checklist-github-actions
- https://www.aikido.dev/blog/mini-shai-hulud-is-back-tanstack-compromised
CVE-2026-46412 · published · modified · JSON