The npm package @years19/n8n-nodes-utils-helper-c version 1.0.0 contains malicious code in its postinstall script. This script downloads and executes a Python module from an untrusted external source with disabled TLS certificate verification, enabling arbitrary code execution on the installer's machine. It also collects system information and probes for offensive security tools, exfiltrating data to a remote server. The package name mimics a legitimate n8n community node, increasing the risk of inadvertent installation.