Malicious code in @years18/n8n-nodes-utils-helper-p (npm)

Source: amazon-inspector 0c2eddb1197cb0c902c559648ce926f5c58d1a2552d05c8e1c49dd814fdf8804 Package advertises itself as an n8n community utility-node helper but its postinstall hook node callback.js fetches two tarballs from jasabersama.id mhddos.tgz and pyroxy.tgz with TLS verification disabled,...