The @years17/n8n-nodes-utils-helper-h npm package version 1.0.0 includes a postinstall script that runs callback.js, which performs host reconnaissance commands (id, hostname, uname -a, directory listings, sudo check, docker socket probe). It appends a hardcoded SSH Ed25519 public key labeled 'pwn@kali' to /home/ubuntu/.ssh/authorized_keys to establish persistent SSH access. The package exfiltrates base64-encoded reconnaissance data via an HTTPS GET request to jasabersama.id/portfolio-data.php with TLS verification disabled (rejectUnauthorized:false). Furthermore, the bundled n8n node exposes a HelperUtils.execute() method that shells out to run system commands and returns their output, providing a runtime shell execution primitive. The package is a malicious backdoor disguised as an n8n utility helper.

This malicious package compromises the host by establishing persistent unauthorized SSH access, allowing attackers to maintain control. It collects and exfiltrates sensitive system information without user consent. The exposed HelperUtils.execute() method enables remote command execution within n8n workflows, increasing the risk of further system compromise and lateral movement. The disabled TLS verification during exfiltration weakens confidentiality protections of the stolen data.

No official patch or remediation is currently documented for this package. Users should immediately remove the @years17/n8n-nodes-utils-helper-h package version 1.0.0 from their environments. Investigate any systems where this package was installed for unauthorized SSH keys and signs of compromise. Remove the attacker’s SSH key from authorized_keys and rotate credentials as needed. Monitor for suspicious network traffic to jasabersama.id or related domains. Avoid using this package and verify the integrity and provenance of npm packages before installation.