Malicious code in n8n-nodes-net-utils (npm)

Source: amazon-inspector 5ddadbbcb032b0a9eb2b0acb04579ceb1da5c1814d3a0d212830b82191dbeca0 The package advertises itself as an n8n community 'Network Utils' node, but its main entry index.js is an IIFE that executes on require. On load it: 1 spawns /bin/bash and connects it to a hardcoded C2 at...