Malicious code in @years17/n8n-nodes-utils-helper-c (npm)

Source: amazon-inspector 983dd9c9e4907f30015aa86aceae1cc95f5511f3de89eadb7b8550a1485c7d24 The package registers a postinstall script also duplicated as the main entry that runs shell reconnaissance on the installer host — id, hostname, whoami, /proc/1/cgroup, environment variables, /etc/os-releas...