The npm package @years19/n8n-nodes-utils-helper-t version 1.0.0 contains malicious code that executes automatically during installation and import. It writes and runs a Python UDP/TCP flood script targeting a hardcoded IP address, effectively turning the host into a participant in a DDoS attack. Concurrently, it collects system identity and load information, encodes it, and exfiltrates the data to a remote server with disabled TLS verification.