npm

ssf-desktop-api-openfin@99.99.2

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 7:42 AM UTC

Malicious

OSV ID

MAL-2025-192360

Ecosystem

npm

Summary

The package ssf-desktop-api-openfin was found to contain malicious code.

Source: amazon-inspector (367b2689b7d50c48e26747ef1edce3a36165d64fd361ad3fc19f1c52fce204f9)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.