The name notification permission is misleading. Because what it actually does is run any code from websites you aren't even visiting currently.