{"id":"MAL-2026-7095","summary":"Malicious code in @tc-core/sso-service (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n","aliases":["GHSA-2hh9-mrp5-vvh3"],"modified":"2026-09-01T11:30:45.362723503Z","published":"2026-07-07T12:30:43Z","database_specific":{"malicious-packages-origins":[{"versions":["0.0.0-defensive-callback"],"id":"RLMA-2026-04788","import_time":"2026-07-09T09:16:00.750200729Z","modified_time":"2026-07-07T12:30:43Z","sha256":"3eef7b15f06e4f121a5c726d37c882a293f3be966a6e1465e0ad2310bc1b65f3","source":"reversing-labs"},{"sha256":"f14951a5804af62546c4f231096e9cd3372caa1159a432b30d9c1e994d1ffe06","source":"reversing-labs","id":"RLUA-2026-05933","import_time":"2026-09-01T11:17:45.079168193Z","modified_time":"2026-08-24T16:31:29Z"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2hh9-mrp5-vvh3"}],"affected":[{"package":{"name":"@tc-core/sso-service","ecosystem":"npm","purl":"pkg:npm/%40tc-core/sso-service"},"versions":["0.0.0-defensive-callback"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@tc-core/sso-service/MAL-2026-7095.json"}}],"schema_version":"1.9.0","credits":[{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}