The npm package @years19/n8n-nodes-utils-helper-x version 1.0.0 contains malicious code that executes during installation and runtime. It launches a Python script performing a UDP/TCP flood DDoS attack against a specific IP address for 900 seconds, effectively weaponizing the host. Additionally, it collects system information and sends it to a remote server over HTTPS with disabled TLS verification. The package falsely advertises utility functionality but solely acts as a DDoS bot and data beacon.