Malicious code in @years19/n8n-nodes-utils-helper-j (npm)

Source: amazon-inspector 4f2e508e05396394d7bf5e459b0fd0e97016592cb83e28dbeac9a678a1a53571 package.json postinstall runs callback.js, and index.js declared main is byte-identical, so both npm install and any require of the package trigger the same payload. The code fetches multiple tarballs mhddos...