Hostile 100% javascript Download

n8n-nodes-final-mile 1.0.3

C2, reverse shell, data exfiltration

Node Bash reverse shell over dev-tcpBash interactive fd bridge
SHA-256fc952c2a058284d41c5425766b8f32db251ff7f06c7c87172599bcd7acd9a6f8
URLhttps://registry.npmjs.org/n8n-nodes-final-mile/-/n8n-nodes-final-mile-1.0.3.tgz
MaleculeO₃(C₂EuCa₂)H₅(Po₅Cm₃Db₂F₅Os₂)Md₂(InPa)

Also flagged by osv (MAL-2026-10776: Malicious code in n8n-nodes-final-mile (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.