206087 matches found
Malicious code in @years19/n8n-nodes-utils-helper-k (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f2ee90541bcb630e80a800d961efa8a534f59200943e7aa09c57f8d4972157f The package's postinstall script callback.js — duplicated byte-for-byte as index.js declared as the package main — fetches multiple tarballs mhddos,...
Malicious code in @years19/n8n-nodes-utils-helper-n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd9bc9e9217d04d7194f72655188a2a827bf5cfdb888693d98a15f2434225e4 Package advertises itself as an n8n community-node utility but ships a postinstall dropper. package.json declares postinstall node callback.js, and...
MAL-2026-13897 Malicious code in @years19/n8n-nodes-utils-helper-n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd9bc9e9217d04d7194f72655188a2a827bf5cfdb888693d98a15f2434225e4 Package advertises itself as an n8n community-node utility but ships a postinstall dropper. package.json declares postinstall node callback.js, and...
Malicious code in @years19/n8n-nodes-utils-helper-m (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85113dcbea98d25a66f14a975ab391a33a72964b38c916b386125857e35ca268 On npm install, the package's postinstall script callback.js / index.js fetches mhddos, PyRoxy, impacket, and multidict tarballs from...
MAL-2026-13896 Malicious code in @years19/n8n-nodes-utils-helper-m (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85113dcbea98d25a66f14a975ab391a33a72964b38c916b386125857e35ca268 On npm install, the package's postinstall script callback.js / index.js fetches mhddos, PyRoxy, impacket, and multidict tarballs from...
MAL-2026-13901 Malicious code in @years19/n8n-nodes-utils-helper-r (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be854b019d25df27d59e1f9bf2b336b967309c348b80b0f2b89fa5ce65408afc The package declares postinstall: node callback.js and its main index.js is byte-identical to callback.js, so both npm install and...
Malicious code in @years19/n8n-nodes-utils-helper-r (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be854b019d25df27d59e1f9bf2b336b967309c348b80b0f2b89fa5ce65408afc The package declares postinstall: node callback.js and its main index.js is byte-identical to callback.js, so both npm install and...
MAL-2026-13898 Malicious code in @years19/n8n-nodes-utils-helper-o (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ea443e408aedb0f2eae3d36e29ae73e81d17330f435d5c1c71399c1dd42d51 On npm install postinstall runs callback.js and again on require of the package identical payload in index.js as the declared main, the package...
Malicious code in @years19/n8n-nodes-utils-helper-o (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ea443e408aedb0f2eae3d36e29ae73e81d17330f435d5c1c71399c1dd42d51 On npm install postinstall runs callback.js and again on require of the package identical payload in index.js as the declared main, the package...
MAL-2026-13904 Malicious code in @years19/n8n-nodes-utils-helper-u (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82adb424b76ab7db887024cb8608a8e7aa3b942797ba38a3eef74fa36c249e5 The package's postinstall hook callback.js and its declared main entry index.js, byte-identical to callback.js both write a Python script to...
Malicious code in @years19/n8n-nodes-utils-helper-u (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82adb424b76ab7db887024cb8608a8e7aa3b942797ba38a3eef74fa36c249e5 The package's postinstall hook callback.js and its declared main entry index.js, byte-identical to callback.js both write a Python script to...
Malicious code in @years20/n8n-nodes-utils-helper-d (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84dc74cbe8090f7fd99c65cda379129055830b63fafb28c8364f3e28de5bbbb8 The package runs a hostile payload both from its declared postinstall hook node callback.js and at library load via index.js, which is byte-identical...
MAL-2026-13912 Malicious code in @years20/n8n-nodes-utils-helper-d (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84dc74cbe8090f7fd99c65cda379129055830b63fafb28c8364f3e28de5bbbb8 The package runs a hostile payload both from its declared postinstall hook node callback.js and at library load via index.js, which is byte-identical...
MAL-2026-13906 Malicious code in @years19/n8n-nodes-utils-helper-w (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28114a258d77475252e0b9f61b21d3f82f8d7d9e2d37bbce9d4a70c2ff0bfa5 The package's postinstall entry callback.js and its declared main entry index.js contain byte-identical top-level code that 1 writes a Python UDP/TCP...
Malicious code in @years19/n8n-nodes-utils-helper-w (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28114a258d77475252e0b9f61b21d3f82f8d7d9e2d37bbce9d4a70c2ff0bfa5 The package's postinstall entry callback.js and its declared main entry index.js contain byte-identical top-level code that 1 writes a Python UDP/TCP...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderCss process. An attacker can inject malicious scripts by providing crafted custom styles through the editor settings interface, which are then rendered on backend pages. This is only exploitable if...
GHSA-VGP4-2FC4-QFF2 Winter: Stored XSS through Editor Settings custom styles
Impact Authenticated Backend Users with the backend.manageeditor "Manage editor settings" permission can provide custom styles through Settings → Editor Settings → Markup Styles that are compiled through the LESS CSS parser and rendered on every backend page. Previously, the compiled output was n...
Winter: Stored XSS through Editor Settings custom styles
Impact Authenticated Backend Users with the backend.manageeditor "Manage editor settings" permission can provide custom styles through Settings → Editor Settings → Markup Styles that are compiled through the LESS CSS parser and rendered on every backend page. Previously, the compiled output was n...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the custom styles process. An attacker can execute arbitrary scripts in the context of backend users by injecting malicious CSS that is not properly sanitized. This is only exploitable if the attacker has the...
