The n8n-nodes-api-finder package (versions 1.0.0, 1.0.1, 1.0.2) is a malicious npm package that pretends to be an n8n community node but executes harmful payloads upon loading. The payload opens a bash reverse shell to a hardcoded IP address and port, collects system and container reconnaissance data, and sends this data over raw TCP to multiple attacker-controlled ports. It attempts two Docker breakout methods to append an attacker-controlled ed25519 public key to the host's root SSH authorized_keys file, enabling persistent root access. Additionally, it docker-executes into a specific container to extract Kubernetes configuration files from the host and exfiltrates them. The malicious code is present in both index.js and package/index.js files within the package.

Successful execution of this malicious package results in remote code execution via a reverse shell, unauthorized collection and exfiltration of sensitive host and container information, and persistent root-level SSH backdoor access on the host system. It compromises container isolation by attempting Docker breakout techniques and exposes Kubernetes credentials, potentially allowing attackers to control container orchestration and infrastructure.

No official patch or remediation is currently available for this malicious package. Users should immediately remove the n8n-nodes-api-finder package versions 1.0.0, 1.0.1, and 1.0.2 from their environments. Avoid installing or using this package from npm. Conduct a thorough investigation of any systems where this package was installed to detect and remediate any unauthorized access or persistence mechanisms. Monitor for suspicious network connections to the hardcoded IP addresses and ports. Consider rotating SSH keys and Kubernetes credentials if compromise is suspected.