The n8n-nodes-final-mile package (versions 1.0.0 to 1.0.5) is a malicious npm package targeting the n8n automation platform. Its main module (index.js) is a self-executing script that, upon loading, opens a reverse shell to a remote IP address, granting the attacker root-level interactive control. It further attempts Docker container escapes by bind-mounting the host root filesystem and using privileged namespace entry to append an attacker-controlled SSH public key to the root user's authorized_keys file, enabling persistent access. Additionally, it collects and exfiltrates sensitive host data including hostname, user ID, network interfaces, Docker container information, environment variables, and critical system files such as /etc/shadow and Kubernetes configuration files. The package uses a benign stub file (MyNode.js) as a cover to hide the malicious index.js payload. This behavior was identified by Amazon Inspector and the OpenSSF Package Analysis project, confirming the package's malicious nature.

Successful execution of this package results in full root-level compromise of the host system where n8n is running. The attacker gains interactive shell access, persistent SSH backdoor access, and can exfiltrate sensitive system and Kubernetes configuration data. This can lead to complete system takeover, data theft, and further lateral movement within the environment.

No official patch or remediation is available for this malicious package. The recommended mitigation is to immediately remove all versions of the n8n-nodes-final-mile package (versions 1.0.0 through 1.0.5) from your environment. Do not install or use this package. Review systems where this package was installed for signs of compromise, including unauthorized SSH keys, unexpected network connections, and presence of reverse shells. Rotate credentials and audit for persistence mechanisms. Use trusted sources and verify package integrity before installation.