The example-nestjs-api npm package versions 10.0.1 and 99.9.9 contain malicious code. This issue is identified as a malicious package threat without detailed technical or impact information provided. No CVSS score or exploit in the wild has been reported.