All versions of
electron-native-notify contain malicious code. The package was part of a targeted attack to steal cryptocurrency wallet seeds and upload them to a remote server, effectively giving attackers access to users wallets.
Remove the package from your environment and follow the recommendations by Komodo
publishedAdvisory PublishedJun 6th, 2019
reportedReported by Adam BaldwinJun 5th, 2019