Hostile 100% javascript Download

@years19/n8n-nodes-utils-helper-f 1.0.0

postinstall exfiltrates system info

Compact Node command output HTTP exfiltrationNPM postinstall exfiltrates encoded shell command output
SHA-256abf71f8ff42266e2762c4f79ad7aa369b633f2c5b28bdcaa234db5edf8050bed
URLhttps://registry.npmmirror.com/@years19/n8n-nodes-utils-helper-f/-/n8n-nodes-utils-helper-f-1.0.0.tgz
MaleculeO₃(EuS₄C)H₄(Cm₄Db₅OsPo₄)Md₂(InPa₂)

Also flagged by osv (MAL-2026-13889: Malicious code in @years19/n8n-nodes-utils-helper-f (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.