The npm package @years18/n8n-nodes-utils-helper-v version 1.0.0 is a malicious package masquerading as a legitimate n8n community node. Upon installation, it executes a postinstall script that collects host identity information and exfiltrates it to a remote server with disabled TLS verification. It also installs offensive network attack tools, including the impacket library and MHDDoS, on the installer's machine. This behavior enables reconnaissance and staging of network attacks from the compromised host.