npm · Malicious package advisory
Malware@years17/n8n-nodes-utils-helper-i
GHSA-8m4c-f2rh-h8r6
Malicious code in @years17/n8n-nodes-utils-helper-i (npm)
Details
**Severity:** Critical
**Affected versions:** `= 1.0.0`
## Source: amazon-inspector (53f34d42e090332e45832b4ab41bb9f5d6fce3ae52309e537a2b884845f2bdd5)
The package's postinstall hook runs callback.js, which appends a hardcoded attacker ssh-ed25519 public key (tagged pwn@kali) to authorized_keys for root, ubuntu, node, runner, and devuser, granting persistent SSH access to the installer's host. It then base64-encodes host reconnaissance (id, hostname, sudo -n id output, /home listing, docker.sock presence) and sends it via HTTPS GET to jasabersama.id/portfolio-data.php with TLS verification disabled. index.js — the package main entry — contains byte-identical code, so the same implant and exfiltration fire on require('@years17/n8n-nodes-utils-helper-i'), providing a second trigger even when --ignore-scripts is used.
---
Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/b33600c98c614ac591d9e3949e4ec5bfbae4052f/osv/malicious/npm/@years17/n8n-nodes-utils-helper-i/MAL-2026-13878.json))
**References:**
- https://github.com/ossf/malicious-packages/blob/b33600c98c614ac591d9e3949e4ec5bfbae4052f/osv/malicious/npm/@years17/n8n-nodes-utils-helper-i/MAL-2026-13878.json
- https://www.npmjs.com/package/@years17/n8n-nodes-utils-helper-i/v/1.0.0
- https://github.com/advisories/GHSA-8m4c-f2rh-h8r6Compromised versions (1)
- = 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.