@years17/n8n-nodes-helper-utils@1.0.1

Analysis

An n8n community node package that performs host reconnaissance on install and on load. The postinstall hook runs `id` and `hostname` and writes the output to /tmp/pwned.txt. The package's main entry point (index.js) and its bundled "PwnNode" node execute `id; hostname; uname -a; ls -la /home; ls -la /; cat /etc/hostname` and write the collected system/user/directory information to /tmp/n8n_pwned.txt. The recon is local-only (no network exfiltration observed); it collects the current user identity, hostname, OS/kernel version, and filesystem directory listings.