OpenSSF/OSV advisory MAL-2026-13878 confirms this npm version as malicious. The package's postinstall hook runs callback.js, which appends a hardcoded attacker ssh-ed25519 public key (tagged pwn@kali) to authorized_keys for root, ubuntu, node, runner, and devuser, granting persistent SSH access to the installer's host. It then base64-encodes host reconnaissance (id, hostname, sudo -n id output, /home listing, docker.sock presence) and sends it via HTTPS GET to...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in @years17/n8n-nodes-utils-helper-i (npm)
Details
The package's postinstall hook runs callback.js, which appends a hardcoded attacker ssh-ed25519 public key (tagged pwn@kali) to authorized_keys for root, ubuntu, node, runner, and devuser, granting persistent SSH access to the installer's host. It then base64-encodes host reconnaissance (id, hostname, sudo -n id output, /home listing, docker.sock presence) and sends it via HTTPS GET to jasabersama.id/portfolio-data.php with TLS verification disabled. index.js — the package main entry — contains byte-identical code, so the same implant and exfiltration fire on require('@years17/n8n-nodes-utils-helper-i'), providing a second trigger even when --ignore-scripts is used.
Decision reason
OpenSSF Malicious Packages via OSV confirms @years17/n8n-nodes-utils-helper-i@1.0.0 as malicious (MAL-2026-13878): Malicious code in @years17/n8n-nodes-utils-helper-i (npm)