The n8n-nodes-rce-poc npm package is a malicious package that provides a remote code execution (RCE) capability when installed in an n8n instance. It executes shell commands on the host system using environment variables to control the commands and exfiltrates command output to attacker-controlled URLs. This package breaks the intended sandboxing of n8n workflows and should be considered fully compromising any system where it is installed.