@years17/n8n-nodes-utils-helper

Details

**Severity:** Critical

**Affected versions:** `= 1.0.1`

## Source: amazon-inspector (14f2f873930574335cddd8ac2a79b3c811b317f636d08c8dd218dae63a8ce8d2)
The package's postinstall script (also executed on require() via index.js) runs a series of host reconnaissance commands (id, hostname, uname -a, docker socket check, sudo -l, docker ps, listings of /home/ubuntu and /root, contents of ~ubuntu/.ssh/authorized_keys, and env vars filtered by docker|n8n|secret|token|key|pass), base64-encodes the output, and transmits it as a query parameter to https://jasabersama.id/portfolio-data.php with TLS certificate validation disabled (rejectUnauthorized: false). Additionally, a bundled n8n node (PwnNode) exposes an execute() method that runs `id; hostname; uname -a; ls -la /home; ls -la /` via child_process.execSync and returns the output as `{ pwned: true, result:... }`, providing an operator-triggered host reconnaissance primitive inside any n8n workflow that uses the node. The package advertises itself as a utility helper but its only functionality is host reconnaissance, secret harvesting, and exfiltration.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/b33600c98c614ac591d9e3949e4ec5bfbae4052f/osv/malicious/npm/@years17/n8n-nodes-utils-helper/MAL-2026-13870.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/b33600c98c614ac591d9e3949e4ec5bfbae4052f/osv/malicious/npm/@years17/n8n-nodes-utils-helper/MAL-2026-13870.json
- https://www.npmjs.com/package/@years17/n8n-nodes-utils-helper/v/1.0.0
- https://www.npmjs.com/package/@years17/n8n-nodes-utils-helper/v/1.0.1
- https://github.com/advisories/GHSA-f67j-4rxv-hg77

Compromised versions (1)

• = 1.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.