Threatdown (Malwarebytes)Install

Summary

Sends a POST to the Threatdown (Malwarebytes) CVE search endpoint (/cve/search/groupby, inferred from the operation name) to retrieve CVE results grouped by a chosen field, with cursor-based pagination.

Inputs

• Body Fields — Collection of optional request body fields: Group By (group_by, default account_id), Next Cursor (next_cursor, for fetching the following page), and Page Size (page_size, default 2000).
• Additional JSON Body — Raw JSON object merged with the Body Fields values to add or override other request body properties. Must be valid JSON.

Output shape

The parsed API response, normalized into n8n items (grouped CVE search results from Threatdown).

The source pack shows only function signatures, so the exact response structure is not visible. Pagination is manual: pass the returned next cursor as Next Cursor to get the next page. The exact endpoint path and the precedence between Additional JSON Body and Body Fields on conflicting keys are not confirmed by the source shown.

Examples

Example 1: Group CVEs by account with default settings

Leave Body Fields at defaults (Group By = account_id, Page Size = 2000).

Example 2: Fetch the next page of grouped results

Set Next Cursor in Body Fields to the cursor value returned by the previous call.

Example 3: Pass extra filters not exposed in the UI

Put additional body properties as a JSON object in Additional JSON Body, e.g. {"page_size": 500}.

Links

• n8n community nodes installation guide