security-lab

A transparent n8n security PoC that prints and returns fixed harmless markers.

Package Information

Released: 2 mo ago
Downloads: 0 weekly / 0 monthly
Latest Version: 1.0.0

Documentation

n8n Security Lab Marker

This is a deliberately harmless and transparent n8n community node for testing the normal community-package installation flow and demonstrating unauthorized package loading.

When n8n imports the package, it prints this fixed marker to the process log:

[n8n security lab] N8N_PUBLIC_PACKAGE_LOAD_OK

When executed, the Security Lab Marker node returns:

{
  "securityLabMarker": "N8N_SECURITY_LAB_OK",
  "packageName": "@umutbayram3806/n8n-nodes-security-lab",
  "safe": true
}

The fixed console marker above is its only import-time behavior. The package does not read files, execute commands, access environment secrets, or contact external services.

Local verification

npm test
npm pack --dry-run

Only publish packages to npm from an account you control and after reviewing the tarball contents.

Discussion