Diamond Member ThaHaka 0 Posted January 12 Diamond Member Share Posted January 12 This is the hidden content, please Sign In or Sign Up Threat actors have been observed uploading a set of eight packages on the npm registry that masqueraded as integrations targeting the n8n workflow automation platform to steal developers' OAuth credentials. One such package, named "n8n-nodes-hfgjf-irtuinvcm-lasdqewriit," mimics a This is the hidden content, please Sign In or Sign Up Ads integration, and prompts users to link their advertising account in a seemingly legitimate form and then This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/295959-h4ckn3wsn8n-supply-chain-attack-abuses-community-nodes-to-steal-oauth-tokens/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.