n8n Docs: Risks of community nodes

Evidence record

n8n documentation warning that npm community nodes are unverified code and can create host, data and workflow risk; the documentation also describes verified nodes and administrative controls for community packages.

Read the original source ↗

Claim-level citations (1)

• supportsMalicious n8n community nodes exfiltrated stored integration credentials: n8n's own documentation warns that community nodes installed from npm are unverified code and can create risks to the host and workflow data, which is the authority boundary the malicious packages abused.

  Risks of community nodes; verified community nodes; disabling community nodes