npm · Malicious package advisory
Malwarecom.db.autobahn.notification-center-electron
GHSA-q6wc-5f8x-wwwj
Malicious code in com.db.autobahn.notification-center-electron (npm)
Details
**Severity:** Critical **Affected versions:** `= 88.88.2` ## Source: ossf-package-analysis (fe0ae07b99c275a092bcb2e4836aeb711a02f98def45f54f91bcf5ba38873807) The OpenSSF Package Analysis project identified 'com.db.autobahn.notification-center-electron' @ 88.88.2 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior. --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/76323eaa1857e7c8873aa005201b1c9281ac3cdd/osv/malicious/npm/com.db.autobahn.notification-center-electron/MAL-2026-15590.json)) **References:** - https://github.com/ossf/malicious-packages/blob/76323eaa1857e7c8873aa005201b1c9281ac3cdd/osv/malicious/npm/com.db.autobahn.notification-center-electron/MAL-2026-15590.json - https://github.com/ossf/malicious-packages/blob/b9c9c442d6f4450955c7f85e197c76604ba12743/osv/malicious/npm/com.db.autobahn.notification-center-electron/MAL-2026-15590.json - https://www.npmjs.com/package/com.db.autobahn.notification-center-electron/v/88.88.1 - https://www.npmjs.com/package/com.db.autobahn.notification-center-electron/v/88.88.2 - https://github.com/ossf/malicious-packages/blob/4012598c9b06e58935bd8883f7a0cd37c3130664/osv/malicious/npm/com.db.autobahn.notification-center-electron/MAL-2026-15590.json - https://github.com/advisories/GHSA-q6wc-5f8x-wwwj
Compromised versions (1)
- = 88.88.2
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.