The npm package @years19/n8n-nodes-utils-helper-n version 1.0.0 contains malicious code that executes during installation and runtime. It runs a postinstall script that downloads multiple tarballs containing malicious tools, disables TLS verification, and launches background processes to participate in a DDoS attack. It also collects system information and sends it to a remote server. This compromises the host system by weaponizing it for denial-of-service attacks and leaking system data.