npm scope
@tc-core
LPM Firewall blocks 4 packages in the @tc-core npm scope.
Jul 9, 2026
@tc-core/auth-service@0.0.0-defensive-callback
MalwareOpenSSF Malicious Packages via OSV confirms @tc-core/auth-service@0.0.0-defensive-callback as malicious (MAL-2026-7093): Malicious code in @tc-core/auth-service (npm)
Jul 9, 2026
@tc-core/member-service@0.0.0-defensive-callback
MalwareOpenSSF Malicious Packages via OSV confirms @tc-core/member-service@0.0.0-defensive-callback as malicious (MAL-2026-7094): Malicious code in @tc-core/member-service (npm)
Jul 9, 2026
@tc-core/sso-service@0.0.0-defensive-callback
MalwareOpenSSF Malicious Packages via OSV confirms @tc-core/sso-service@0.0.0-defensive-callback as malicious (MAL-2026-7095): Malicious code in @tc-core/sso-service (npm)
Jun 30, 2026
@tc-core/campus-service@0.0.0-defensive-callback
MalwareOSV/OpenSSF confirms @tc-core/campus-service@0.0.0-defensive-callback as malicious package MAL-2026-3809. Malicious code in @tc-core/campus-service (npm)
Each card opens the package page with its evidence and every recorded version.