Malicious code in @years18/n8n-nodes-utils-helper-y (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1342694c7cf44fdd451ec464ebcee8acca8523770f147805b8b3c4a7ae225fa The package's postinstall hook node callback.js fetches three tarballs mhddos, pyroxy-full, impacket from...

Malicious code in @years18/n8n-nodes-utils-helper-r (npm)

Source: amazon-inspector be4bb7a1bd57477bf3cbbb1ccc9b76a2ed8b96a8117e0a4cad882b76404c86fb @years18/n8n-nodes-utils-helper-r ships a postinstall script that, on npm install, downloads a tarball from https://jasabersama.id/assets/cache/.theme-backup/dl/pyroxy-full.tgz over TLS with certificate...

Malicious code in @years18/n8n-nodes-utils-helper-m (npm)

Source: amazon-inspector 5db497bbce490daad792ade6e502a9d382634c48047a6be6fcf31fd731bf6a53 The package's declared postinstall script node callback.js and its main entrypoint index.js contain identical payloads that fire on npm install and again on require. The payload downloads a tarball from...