Malicious npm packages posing as n8n community nodes were used to steal OAuth tokens by abusing trusted workflow integrations ...

In the dynamic landscape of workflow automation, n8n is a powerful and versatile tool. However, there are instances where the existing nodes may not fully address your unique requirements. This is ...

Researchers discovered malicious npm packages posing as n8n integrations, exfiltrating OAuth tokens and API keys from ...

A supply chain attack on n8n injected malicious community nodes to steal user OAuth tokens, highlighting critical risks in ...

A patch and workarounds are available.

What if you could master the majority of a powerful automation tool without spending weeks or months learning every single feature? Here’s the surprising truth: with n8n, you don’t need to know it all ...

Nearly 60,000 n8n instances exposed online remain unpatched against a maximum-severity vulnerability dubbed "Ni8mare." ...

A newly discovered vulnerability in authentication platform n8n could allow threat actors to take control of n8n servers ...