Suspicious Jupyter Notebook Child Process Execution

Ethan Andrews@eandrews

•updated Jun 4, 2026•2•0•6

Identifies instances where a Jupyter Notebook is opened and initiates suspicious child shell processes. This may indicate the execution of embedded malicious HTML or scripts attempting to automate UI interactions, such as bypassing extension installation prompts in VS Code environments.