
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@openfin/remote-adapter
Advanced tools
This package contains APIs for proxying API messages between OpenFin applications running on different machines.
The APIs provided require WebRTC peer connections. This package does not provide WebRTC peer connections for you, establishing those is up to you.
Useful resources:
With npm:
$ npm i -S @openfin/remote-adapter
With yarn:
$ yarn add @openfin/remote-adapter
Initialize a connection from a "host" OpenFin application.
import { init } from '@openfin/remote-adapter';
const rtcPeer = createWebRTCPeer(); // we don't provide this function it is the user's responsibility to create a RTCPeerConnection
await init({ fin: window.fin, rtc: rtcPeer });
Connect to the "host" application from a "remote" application.
import { connect } from '@openfin/remote-adapter';
import { fdc3FromFin } from '@openfin/fdc3-api';
const rtcPeer = createWebRTCPeer(); // we don't provide this function it is the user's responsibility to create a RTCPeerConnection
const fin = await connect({ rtc: rtcPeer });
// Connect to the host application as an interop client.
fin.me.interop = fin.Interop.connectSync('<HOST_APP_UUID>', {});
// Get an instance of fdc3 from using the fdc3-api package (https://www.npmjs.com/package/@openfin/fdc3-api).
const fdc3 = await fdc3FromFin(fin);
Copyright 2020-2023 OpenFin
The code in this package is distributed under the Apache License, Version 2.0.
However, if you run this code, it may call on the OpenFin RVM or OpenFin Runtime, which are covered by OpenFin's Developer, Community, and Enterprise licenses. You can learn more about OpenFin licensing at the links listed below or email us at support@openfin.co with questions.
FAQs
Establish intermachine runtime connections using webRTC.
The npm package @openfin/remote-adapter receives a total of 1,294 weekly downloads. As such, @openfin/remote-adapter popularity was classified as popular.
We found that @openfin/remote-adapter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 58 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.