n8n-nodes-task-runner

MAL-2026-10999

npmmalware7/22/2026
Description

Malicious code in n8n-nodes-task-runner (npm)

Indicators of Compromise
SHA256 Hashes (11)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Ecosystemnpm
Attack Typemalware
Published7/22/2026
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001