On Debian11/KDE I see that node is running and accessing the Internet but I didn't start it.
How can I find out how it got started to see why it's running and prevent that? ps -p {pid} -lf doesn't show useful information. If it autostarts or started after some upgrade, I'd like to see and prevent that.
nodeand try one of these commands:ps -o 'pid,ppid,args,unit' pid_node_proccessorsystemctl status pid_node_proccess[email protected]; the 2nd one has it beneath the branchapp-konsole-{id}.scope(what does that mean?) and it seems like what's running isnpm/node_modules/update-notifier/check.js {"pkg":{"name":"npm","version":"6.14.16"}}1000session (your current user). About the second one I'm not really sure but it seems that the konsole/terminal is running the node js application. Maybe an installation/update create the 'startup' configuration for this node js app. Just try checking the filenpm/node_modules/update-notifier/check.jsand see all is OK (check it's not a type of malware)