Malicious code in n8n-nodes-moonlet-helpers (npm)

Source: amazon-inspector 937f80200481fb9bef57f6dc72e7ad55bee68982b1cb7a86b909c86c46e8b2ec Package presents itself as n8n helper nodes but ships an empty stub index.js module.exports = and no functional node modules. On npm install, postinstall.js runs automatically: it performs an HTTPS GET to...