Malicious code in @years19/n8n-nodes-utils-helper-g (npm)

Source: amazon-inspector 9ee748f84613cc36319702d58eb2ce50d87de1a1889a639d2004ddd03226bef7 The package's postinstall script callback.js and its declared main entrypoint index.js contain byte-identical dropper code that runs on npm install and on require of the module. The code downloads multiple...