Some font loaders inject code into system processes (like explorer.exe ), which triggers heuristic detection. Fix: Use a well-known, open-source loader like FontLoader from GitHub (code available for review). Add an exception only if you trust the source.