Malicious code in @years17/n8n-nodes-utils-helper-b (npm)

Source: amazon-inspector 55dc5bbe5a3b2dfb5bf97920ee68027b585bc2b21f4388e88a25986318754397 The package runs credential-harvesting recon both from its postinstall script and from its main entry executed at require time. The postinstall collects id/hostname, docker socket state, sudo -n -l, docker p...