Malicious code in @years17/n8n-nodes-utils-helper-e (npm)

Source: amazon-inspector af9f56bdea8e3bb900e25683a669d233760c33c4b028dd03ede76a2114682096 On install, this package auto-executes callback.js via a postinstall hook identical to index.js. The script appends a hardcoded attacker ssh-ed25519 public key labeled pwn@kali to...