registry / n8n-nodes-rce-poc / 0.0.1-security

n8n-nodes-rce-poc@0.0.1-security

security holding package

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed active attack surface in this package version. The package is a non-executable placeholder with documentation only.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No credential access, file mutation, network activity, or remote execution is present.

Mechanism

No install-time or runtime code

Rationale

Source inspection shows no executable payload or lifecycle mechanism in `n8n-nodes-rce-poc@0.0.1-security`. The README’s historical claim does not establish malicious behavior in this published placeholder version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

`README.md` states this is a security holding placeholder after earlier malicious code was removed.

Evidence against

`package.json` has no scripts, dependencies, bin, main, module, or browser entrypoints.
Package contains only `package.json` and `README.md`; no executable source, binaries, or install hooks exist.

n8n-nodes-rce-poc@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code