
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
@bitovi/n8n-nodes-utils
Advanced tools
This is an n8n community node package that provides utility nodes for enhancing your n8n workflows. It includes nodes for JSON schema validation, regex operations, data manipulation, and Wikipedia integration.
n8n is a fair-code licensed workflow automation platform.
Installation
Operations
Compatibility
Usage
Resources
Follow the installation guide in the n8n community nodes documentation.
N8N_COMMUNITY_PACKAGES_ENABLED=true/settings/community-nodes and type @bitovi/n8n-nodes-utilsThis package includes the following utility nodes:
Validates JSON data against a provided JSON schema using the AJV library.
Perform regular expression operations on text data.
Skip a specified number of items from the input data stream.
Integrate with Wikipedia to fetch content and metadata.
This package has been tested with recent versions of n8n and follows the community node standards.
Use this node to validate API responses or user input data:
{
"type": "object",
"properties": {
"name": { "type": "string" },
"age": { "type": "number", "minimum": 0 },
"email": { "type": "string", "format": "email" }
},
"required": ["name", "email"]
}
Extract email addresses from text:
[\w\.-]+@[\w\.-]+\.\w+g (global to find all matches)Fetch content about a topic for AI processing or content generation:
Need guidance on leveraging AI agents or N8N for your business? Our AI Agents workshop will equip you with the knowledge and tools necessary to implement successful and valuable agentic workflows.
FAQs
N8N util nodes from Bitovi
The npm package @bitovi/n8n-nodes-utils receives a total of 1,250 weekly downloads. As such, @bitovi/n8n-nodes-utils popularity was classified as popular.
We found that @bitovi/n8n-nodes-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 15 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.