Malicious code in @years17/n8n-nodes-utils-helper-h (npm)

Source: amazon-inspector aba5b7d9e03a0f3796945ee4c55a6f32169b8f32b794dad9c1b450883667116b The package's postinstall script executes callback.js, which runs host reconnaissance id, hostname, uname -a, directory listings, sudo -n check, docker socket probe, appends a hardcoded attacker ssh-ed25519...