Malicious code in @tc-core/auth-service (npm)

The package @tc-core/auth-service at version 0.0.0-defensive-callback is flagged for containing malicious code. This is a supply chain threat involving a malicious npm package rather than a conventional vulnerability. No further technical details or exploitation methods are documented in the source data. No patch or fix information is available.

The presence of malicious code in the specified npm package version can lead to compromise of systems that install and run this package. The exact impact depends on the malicious payload, which is not detailed in the provided information. No known active exploitation has been reported.

No official patch or remediation guidance is provided. Users should avoid using the affected version (=0.0.0-defensive-callback) of the @tc-core/auth-service package. Consider removing or replacing this package with a trusted alternative. Monitor official advisories for updates or fixes.