MAL-2025-192359

    Dashboard / Malicious Package / MAL-2025-192359

    MAL-2025-192359

    Published: 6 Dec 2025Last Modified: 10 Dec 2025

    Summary: Malicious code in ssf-desktop-api-browser (npm)

    Details: Source: amazon-inspector (5940c26ac6aa2f9c3682f4d383922757d2d5c361b5a70140ca289eabe304be8d) The package ssf-desktop-api-browser was found to contain malicious code. Source: ossf-package-analysis (7ffc9bc5c2f4d591889c48fe55592f79ae8732b2228273d3d884793bd9d7c024) The OpenSSF Package Analysis project identified 'ssf-desktop-api-browser' @ 99.99.2 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The package executes one or more commands associated with malicious behavior.

    References:

    Affected packages

    Package

    Name: ssf-desktop-api-browser

    Purl: pkg:npm/ssf-desktop-api-browser

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    99.99.2
    MAL-2025-192359 | CVE-DB