⌘ + K

MAL-2026-10775

Dashboard / Malicious Package / MAL-2026-10775

MAL-2026-10775

Published: 17 Jul 2026Last Modified: 28 Jul 2026

Summary: Malicious code in n8n-nodes-devops-utils (npm)

Details: Source: amazon-inspector (464fa8baaffef716b3920968d35dfbf6c8d49cd439ad5c5bd45050074436d79b) Package masquerades as an n8n community node (package.json declares n8n.nodes: ["MyNode.js"], a trivial placeholder) while index.js contains an unrelated attack chain that executes as a top-level IIFE at require()-time. Behaviors observed: (1) spawns /bin/bash and wires its stdio to a TCP socket at hardcoded C2 103.27.109.184:8895, yielding an interactive reverse shell on the installer's host; (2) if Docker is available, runs `docker run -v /:/host alpine` and `--privileged nsenter` variants to append a hardcoded attacker ssh-ed25519 key (labeled 'n8n-backdoor') to /root/.ssh/authorized_keys on the host, establishing persistent root SSH access; (3) collects host recon (hostname, id, hostname -I, docker ps) and reads /etc/passwd, /etc/shadow, /root/.kube/config and /home/*/.kube/config via the same Docker mount, then POSTs results over raw TCP to 103.27.109.184 ports 8890 and 8891. The advertised n8n node functionality is a cover for full-host compromise, container-escape persistence, and Kubernetes/credential exfiltration. Source: ossf-package-analysis (7d87d06a30cac4e9cbdeb002341bede1478f4a3d31aa8e3579156f641300d4ad) The OpenSSF Package Analysis project identified 'n8n-nodes-devops-utils' @ 1.0.7 (npm) as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior.

Affected packages

Package

Name: n8n-nodes-devops-utils

Purl: pkg:npm/n8n-nodes-devops-utils

Affected ranges

Type: N/A

Events:

Introduced- None

Fixed -None

Affected versions

1.0.7

1.0.0

1.0.5

1.0.4

1.0.6

1.0.3

1.0.2

1.0.1