The npm package @years18/n8n-nodes-utils-helper-o version 1.0.0 is a malicious package masquerading as an n8n community node. Upon installation, it disables TLS verification to download and extract malicious payloads, installs Python DDoS-related dependencies, and executes a Python script that performs reconnaissance and communicates encoded system information to a remote server. This behavior is hidden behind a benign utility package facade.