Malicious npm packages posing as n8n community nodes were used to steal OAuth tokens by abusing trusted workflow integrations ...
Researchers discovered malicious npm packages posing as n8n integrations, exfiltrating OAuth tokens and API keys from ...
A compromised n8n instance doesn’t just mean losing one system — it means handing attackers the keys to everything,’ security ...