VYPR

npm · Malicious package advisory

Malware

com.db.autobahn.notification-center-electron

GHSA-q6wc-5f8x-wwwj

Malicious code in com.db.autobahn.notification-center-electron (npm)

Details

**Severity:** Critical

**Affected versions:** `= 88.88.2`

## Source: ossf-package-analysis (fe0ae07b99c275a092bcb2e4836aeb711a02f98def45f54f91bcf5ba38873807)
The OpenSSF Package Analysis project identified 'com.db.autobahn.notification-center-electron' @ 88.88.2 (npm) as malicious.

It is considered malicious because:

- The package executes one or more commands associated with malicious behavior.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/76323eaa1857e7c8873aa005201b1c9281ac3cdd/osv/malicious/npm/com.db.autobahn.notification-center-electron/MAL-2026-15590.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/76323eaa1857e7c8873aa005201b1c9281ac3cdd/osv/malicious/npm/com.db.autobahn.notification-center-electron/MAL-2026-15590.json
- https://github.com/ossf/malicious-packages/blob/b9c9c442d6f4450955c7f85e197c76604ba12743/osv/malicious/npm/com.db.autobahn.notification-center-electron/MAL-2026-15590.json
- https://www.npmjs.com/package/com.db.autobahn.notification-center-electron/v/88.88.1
- https://www.npmjs.com/package/com.db.autobahn.notification-center-electron/v/88.88.2
- https://github.com/ossf/malicious-packages/blob/4012598c9b06e58935bd8883f7a0cd37c3130664/osv/malicious/npm/com.db.autobahn.notification-center-electron/MAL-2026-15590.json
- https://github.com/advisories/GHSA-q6wc-5f8x-wwwj

Compromised versions (1)

  • = 88.88.2

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.