This package matches a known-malicious advisory and is blocked by ShadowCanopy by default across every project. 18 flagged versions.
No static findings, only standard compiled NestJS auth module files (OIDC/JWT strategies), clean sandbox install. Consistent with legitimate scoped auth package.
AI breakdown
Plain-English summary of what this package does and how it behaves.
This package is a NestJS authentication module for BeProduct IDS using OpenID Connect. It exports OIDC and JWT strategies, user interfaces, a current-user decorator, and related module configuration. The package contains only compiled dist/ files with no runtime dependencies or install scripts.
Capabilities
- Provides NestJS module for OIDC/JWT auth
- Exports current-user decorator
- Includes BeProduct auth options and user interfaces
- Runs TypeScript build on prepublish
Data access
- None observed
Network
- No network access observed
Intended for authentication in NestJS apps; no malicious scripts, dependencies, or findings were present in the manifest or file list.
Package metadata
NestJS authentication module for BeProduct IDS (OpenID Connect)
Files in package (56)
How ShadowCanopy checks npm packages
ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.
This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/npm/%40beproduct/nestjs-auth