205931 matches found
Malicious code in @years17/n8n-nodes-utils-helper-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dc5bbe5a3b2dfb5bf97920ee68027b585bc2b21f4388e88a25986318754397 The package runs credential-harvesting recon both from its postinstall script and from its main entry executed at require time. The postinstall...
Malicious code in @years17/n8n-nodes-utils-helper-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983dd9c9e4907f30015aa86aceae1cc95f5511f3de89eadb7b8550a1485c7d24 The package registers a postinstall script also duplicated as the main entry that runs shell reconnaissance on the installer host — id, hostname,...
MAL-2026-13872 Malicious code in @years17/n8n-nodes-utils-helper-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983dd9c9e4907f30015aa86aceae1cc95f5511f3de89eadb7b8550a1485c7d24 The package registers a postinstall script also duplicated as the main entry that runs shell reconnaissance on the installer host — id, hostname,...
MAL-2026-13870 Malicious code in @years17/n8n-nodes-utils-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f2f873930574335cddd8ac2a79b3c811b317f636d08c8dd218dae63a8ce8d2 The package's postinstall script also executed on require via index.js runs a series of host reconnaissance commands id, hostname, uname -a, docker...
Malicious code in @years17/n8n-nodes-utils-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f2f873930574335cddd8ac2a79b3c811b317f636d08c8dd218dae63a8ce8d2 The package's postinstall script also executed on require via index.js runs a series of host reconnaissance commands id, hostname, uname -a, docker...
MAL-2026-13877 Malicious code in @years17/n8n-nodes-utils-helper-h (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba5b7d9e03a0f3796945ee4c55a6f32169b8f32b794dad9c1b450883667116b The package's postinstall script executes callback.js, which runs host reconnaissance id, hostname, uname -a, directory listings, sudo -n check, dock...
Malicious code in @years17/n8n-nodes-utils-helper-h (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba5b7d9e03a0f3796945ee4c55a6f32169b8f32b794dad9c1b450883667116b The package's postinstall script executes callback.js, which runs host reconnaissance id, hostname, uname -a, directory listings, sudo -n check, dock...
Malicious code in @years17/n8n-nodes-utils-helper-e (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9f56bdea8e3bb900e25683a669d233760c33c4b028dd03ede76a2114682096 On install, this package auto-executes callback.js via a postinstall hook identical to index.js. The script appends a hardcoded attacker ssh-ed25519...
MAL-2026-13874 Malicious code in @years17/n8n-nodes-utils-helper-e (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9f56bdea8e3bb900e25683a669d233760c33c4b028dd03ede76a2114682096 On install, this package auto-executes callback.js via a postinstall hook identical to index.js. The script appends a hardcoded attacker ssh-ed25519...
Malicious code in @years18/n8n-nodes-utils-helper-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf84337e9bfc6e73590b5a3e89e88a245d4387b437ae765517889db0cded1fe The package declares itself as a workflow-automation helper but its postinstall script node callback.js fetches a tarball from...
MAL-2026-13848 Malicious code in @years18/n8n-nodes-utils-helper-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf84337e9bfc6e73590b5a3e89e88a245d4387b437ae765517889db0cded1fe The package declares itself as a workflow-automation helper but its postinstall script node callback.js fetches a tarball from...
Malicious code in @years18/n8n-nodes-utils-helper-d (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0940a90826ae5cd1b3d36dbbebd7813996ccbcf80e8c24759829dad3c17ed66e Package is presented as an n8n community node but the only node file nodes/PwnNode.node.js is a 213-byte stub; the real behavior is in callback.js,...
MAL-2026-13850 Malicious code in @years18/n8n-nodes-utils-helper-d (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0940a90826ae5cd1b3d36dbbebd7813996ccbcf80e8c24759829dad3c17ed66e Package is presented as an n8n community node but the only node file nodes/PwnNode.node.js is a 213-byte stub; the real behavior is in callback.js,...
Malicious code in @years18/n8n-nodes-utils-helper-e (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70df151b0a3f6d74618b466c9d7ac91e18389b38a805e2010b55202b5722330 On npm install, this package auto-runs callback.js via a postinstall hook and repeats the same behavior in index.js on require. The script shells out...
MAL-2026-13851 Malicious code in @years18/n8n-nodes-utils-helper-e (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70df151b0a3f6d74618b466c9d7ac91e18389b38a805e2010b55202b5722330 On npm install, this package auto-runs callback.js via a postinstall hook and repeats the same behavior in index.js on require. The script shells out...
MAL-2026-13854 Malicious code in @years18/n8n-nodes-utils-helper-j (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17b5de9890a54a8a7a1ddf14ff05488baa64612904cf577591e1b9f9a007f1a The package ships a postinstall hook node callback.js and a main entrypoint index.js, byte-identical to callback.js that both perform install-time an...
Malicious code in @years18/n8n-nodes-utils-helper-j (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17b5de9890a54a8a7a1ddf14ff05488baa64612904cf577591e1b9f9a007f1a The package ships a postinstall hook node callback.js and a main entrypoint index.js, byte-identical to callback.js that both perform install-time an...
Malicious code in @years18/n8n-nodes-utils-helper-f (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df58050e02ff53c728a303196575150af9e64959761f10079284077b1c274572 On npm install, the package's postinstall hook callback.js / index.js executes shell commands including id and hostname, probes the internal RFC1918...
MAL-2026-13852 Malicious code in @years18/n8n-nodes-utils-helper-f (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df58050e02ff53c728a303196575150af9e64959761f10079284077b1c274572 On npm install, the package's postinstall hook callback.js / index.js executes shell commands including id and hostname, probes the internal RFC1918...
Malicious code in @years18/n8n-nodes-utils-helper-g (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16d7ce451e7cdf1d3486a22c2ec25e3f56651ce45e132178839e2283918183f The package's postinstall script callback.js and its declared main entry index.js, byte-identical to callback.js fetch a tarball and a get-pip...