2539263 matches found
MAL-2026-13884 Malicious code in @years19/n8n-nodes-utils-helper-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd60aaab1ca86f97939ddbea892feba63b7d911dd038a8d6f348ece5af3a76e The package advertises itself as an n8n utility helper and registers a trivial stub node nodes/PwnNode.node.js, but its postinstall lifecycle script...
Malicious code in @years19/n8n-nodes-utils-helper-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a351b02a61973662e99b6b37c696ef8156d4e95832500ca99d7123e01e5f4bbf Package advertises itself as a utility helper for n8n workflow automation, but the shipped n8n node nodes/PwnNode.node.js is a 213-byte stub with no...
MAL-2026-13885 Malicious code in @years19/n8n-nodes-utils-helper-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a351b02a61973662e99b6b37c696ef8156d4e95832500ca99d7123e01e5f4bbf Package advertises itself as a utility helper for n8n workflow automation, but the shipped n8n node nodes/PwnNode.node.js is a 213-byte stub with no...
MAL-2026-13887 Malicious code in @years19/n8n-nodes-utils-helper-d (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cc0c6234ca588b2b29bf75b0f90ba24b6152f379034bb60f1956e48c6e09f7 The package presents itself as an n8n community node n8n-nodes-utils-helper-d but its actual on-install behavior is unrelated to workflow automation...
Malicious code in @years19/n8n-nodes-utils-helper-d (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cc0c6234ca588b2b29bf75b0f90ba24b6152f379034bb60f1956e48c6e09f7 The package presents itself as an n8n community node n8n-nodes-utils-helper-d but its actual on-install behavior is unrelated to workflow automation...
MAL-2026-13886 Malicious code in @years19/n8n-nodes-utils-helper-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8eda8f141799c4f6f587dbf9771f07e86f64abac9d161319e19b3f836a7fde The npm package's postinstall script callback.js resolves the user's Python site-packages directory and downloads a tarball from...
Malicious code in @years19/n8n-nodes-utils-helper-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8eda8f141799c4f6f587dbf9771f07e86f64abac9d161319e19b3f836a7fde The npm package's postinstall script callback.js resolves the user's Python site-packages directory and downloads a tarball from...
Malicious code in @years19/n8n-nodes-utils-helper-g (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee748f84613cc36319702d58eb2ce50d87de1a1889a639d2004ddd03226bef7 The package's postinstall script callback.js and its declared main entrypoint index.js contain byte-identical dropper code that runs on npm install a...
MAL-2026-13890 Malicious code in @years19/n8n-nodes-utils-helper-g (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee748f84613cc36319702d58eb2ce50d87de1a1889a639d2004ddd03226bef7 The package's postinstall script callback.js and its declared main entrypoint index.js contain byte-identical dropper code that runs on npm install a...
MAL-2026-13911 Malicious code in @years20/n8n-nodes-utils-helper-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf7b80781cbd76ad24c149a065fbcdd3d75cff7911b0225a540b0f358c35570 On npm install, callback.js/index.js invoked from the package's postinstall/main executes id and hostname, reads /etc/ssh/sshhosted25519key.pub,...
Malicious code in @years20/n8n-nodes-utils-helper-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf7b80781cbd76ad24c149a065fbcdd3d75cff7911b0225a540b0f358c35570 On npm install, callback.js/index.js invoked from the package's postinstall/main executes id and hostname, reads /etc/ssh/sshhosted25519key.pub,...
MAL-2026-13909 Malicious code in @years20/n8n-nodes-utils-helper-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53efd1db4158ab9b9fbc01983ff03019e4938eb54329876135b5eb4a0ba927bc The package's postinstall script callback.js and its main module index.js, byte-identical to callback.js execute on both npm install and require. The...
Malicious code in @years20/n8n-nodes-utils-helper-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53efd1db4158ab9b9fbc01983ff03019e4938eb54329876135b5eb4a0ba927bc The package's postinstall script callback.js and its main module index.js, byte-identical to callback.js execute on both npm install and require. The...
Malicious code in @years20/n8n-nodes-utils-helper-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f282ccd8bb4c80e0316cecf2a9294b7f183bb2339cca52ff72508f2978f2e60 On npm install postinstall and on require/import of the package's main entry, callback.js and index.js execute id, hostname, and WSL detection, read...
MAL-2026-13910 Malicious code in @years20/n8n-nodes-utils-helper-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f282ccd8bb4c80e0316cecf2a9294b7f183bb2339cca52ff72508f2978f2e60 On npm install postinstall and on require/import of the package's main entry, callback.js and index.js execute id, hostname, and WSL detection, read...
Malicious code in @years20/n8n-nodes-utils-helper-f (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8297c0d5a6f2c446285924983ee24b195c180fbaa75a7826e8e925497eddab7 The package auto-executes a reconnaissance and exfiltration payload both at install via scripts.postinstall running callback.js and on require...
MAL-2026-13914 Malicious code in @years20/n8n-nodes-utils-helper-f (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8297c0d5a6f2c446285924983ee24b195c180fbaa75a7826e8e925497eddab7 The package auto-executes a reconnaissance and exfiltration payload both at install via scripts.postinstall running callback.js and on require...
Malicious code in @years19/n8n-nodes-utils-helper-h (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690b884eaa3ac12bdca74814577c4d42fb0811ee22ebc20687f809ad3e293755 On install, callback.js also present as index.js and wired as the postinstall hook downloads four Python tarballs mhddos, PyRoxy, impacket, and relat...
MAL-2026-13891 Malicious code in @years19/n8n-nodes-utils-helper-h (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690b884eaa3ac12bdca74814577c4d42fb0811ee22ebc20687f809ad3e293755 On install, callback.js also present as index.js and wired as the postinstall hook downloads four Python tarballs mhddos, PyRoxy, impacket, and relat...
Malicious code in @years19/n8n-nodes-utils-helper-j (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2e508e05396394d7bf5e459b0fd0e97016592cb83e28dbeac9a678a1a53571 package.json postinstall runs callback.js, and index.js declared main is byte-identical, so both npm install and any require of the package trigger t...