n8n-nodes-pwn

GHSA-w94v-mhc2-274p

Malicious code in n8n-nodes-pwn (npm)

Details

**Severity:** Critical

**Affected versions:** `= 1.0.6`

## Source: amazon-inspector (ae8222d3f90f4cff83a0840ee03f4b127946274f0215a73eadd6008404a2276e)
The package's Pwn.node.js executes malicious code at module load time when n8n loads this community node. It opens a TCP socket to 10.0.0.145:4444 and pipes the socket to a spawned /bin/sh -i, giving a remote party interactive shell control of the installer's host. In parallel, top-level code runs host reconnaissance commands (network interfaces, routes, ARP, /proc/net/tcp, filesystem searches for flag/*.txt), reads /home/node/.n8n/database.sqlite (n8n's encrypted workflow credentials store) filtered for 'flag|password|secret', and reads /home/node/.n8n/config, POSTing the aggregated output to http://10.0.0.145:8000/rce-out3. The hardcoded 10.0.0.145 destination is a private RFC1918 address consistent with a lab/PoC target, but the payload is fully weaponized and would execute against any installer that loads the node.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/11d3fe86e64bc222b3148fee7be5b337ee8c3c0f/osv/malicious/npm/n8n-nodes-pwn/MAL-2026-11004.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/11d3fe86e64bc222b3148fee7be5b337ee8c3c0f/osv/malicious/npm/n8n-nodes-pwn/MAL-2026-11004.json
- https://www.npmjs.com/package/n8n-nodes-pwn/v/1.0.0
- https://www.npmjs.com/package/n8n-nodes-pwn/v/1.0.5
- https://www.npmjs.com/package/n8n-nodes-pwn/v/1.0.6
- https://www.npmjs.com/package/n8n-nodes-pwn/v/1.0.7
- https://www.npmjs.com/package/n8n-nodes-pwn/v/1.0.8
- https://github.com/advisories/GHSA-w94v-mhc2-274p

Compromised versions (1)

= 1.0.6

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.