diff --git a/SOURCES/npmrc b/SOURCES/npmrc
index 50be1d1..30b238d 100644
--- a/SOURCES/npmrc
+++ b/SOURCES/npmrc
@@ -1,2 +1,4 @@
 prefix=/usr/local
 python=/usr/bin/python3
+update-notifier=false
+
diff --git a/SPECS/nodejs.spec b/SPECS/nodejs.spec
index d5adb09..671e61f 100644
--- a/SPECS/nodejs.spec
+++ b/SPECS/nodejs.spec
@@ -32,7 +32,7 @@
 # This is used by both the nodejs package and the npm subpackage that
 # has a separate version - the name is special so that rpmdev-bumpspec
 # will bump this rather than adding .1 to the end.
-%global baserelease 1
+%global baserelease 2
 
 %{?!_pkgdocdir:%global _pkgdocdir %{_docdir}/%{name}-%{version}}
 
@@ -567,6 +567,11 @@ NODE_PATH=%{buildroot}%{_prefix}/lib/node_modules:%{buildroot}%{_prefix}/lib/nod
 # Make sure i18n support is working
 NODE_PATH=%{buildroot}%{_prefix}/lib/node_modules:%{buildroot}%{_prefix}/lib/node_modules/npm/node_modules LD_LIBRARY_PATH=%{buildroot}%{_libdir} %{buildroot}/%{_bindir}/node --icu-data-dir=%{buildroot}%{icudatadir} %{SOURCE2}
 
+# Ensure npm's update notifier has been disabled
+LD_LIBRARY_PATH=%{buildroot}%{_libdir} \
+%{buildroot}%{_bindir}/node \
+%{buildroot}%{_bindir}/npm \
+--globalconfig=%{buildroot}$(LD_LIBRARY_PATH=%{buildroot}%{_libdir} %{buildroot}%{_bindir}/node %{buildroot}%{_bindir}/npm config get globalconfig) config ls -l --json | jq -e '.["update-notifier"] == false'
 
 %files
 %{_bindir}/node
@@ -634,7 +639,11 @@ NODE_PATH=%{buildroot}%{_prefix}/lib/node_modules:%{buildroot}%{_prefix}/lib/nod
 
 
 %changelog
-* Wed Jan 29 2025 Andrei Radchenko <aradchen@redhat.com>
+* Wed Mar 05 2025 Andrei Radchenko <aradchen@redhat.com> - 1:20.18.2-2
+- Disable npm's update-notifier
+  Resolves: RHEL-81090
+
+* Wed Jan 29 2025 Andrei Radchenko <aradchen@redhat.com> - 1:20.18.2-1
 - Update to version 20.18.2
   Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
   Resolves: RHEL-76536 RHEL-76364