
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@hostsmith/n8n-nodes-hostsmith
Advanced tools
n8n community node to manage Hostsmith sites, domains, and account
An n8n community node for Hostsmith — manage your Hostsmith sites, domains, and account from your workflows.
It authenticates with Hostsmith's OAuth 2.0 (Authorization Code + PKCE) and talks to the Hostsmith Public API.
In n8n: Settings → Community Nodes → Install, then enter @hostsmith/n8n-nodes-hostsmith.
Or install from npm in your n8n instance:
npm install @hostsmith/n8n-nodes-hostsmith
The Hostsmith node exposes three resources:
| Resource | Operations |
|---|---|
| Account | Get (org details, plan limits, usage) |
| Domain | List (all / shared only / custom only) |
| Site | Create, Delete, Deploy, Get, List |
The node resolves the partition API host (https://us.api.hostsmith.net / https://eu.api.hostsmith.net) automatically — there is no partition setting on the credential:
Site → Deploy publishes one or more files to a site as a new version, using Hostsmith's presigned upload flow (POST /uploads → PUT each part → POST …/finalize):
data) or Text (inline content, ideal for AI/template-generated HTML or JSON) — and a required File Name giving the destination path within the site (e.g. index.html, assets/style.css).N8N_DEFAULT_BINARY_DATA_MODE=filesystem so file bytes aren't held entirely in memory.Bytes are read only from binary input or inline text — the node never touches the filesystem.
Add a Hostsmith OAuth2 API credential. Hostsmith is a public OAuth client (PKCE, no client secret), so you only ever provide a Client ID — never a secret. You get that Client ID by creating an OAuth client in the Hostsmith dashboard.
<your-n8n-base-url>/rest/oauth2-credential/callback
(e.g. http://localhost:5678/rest/oauth2-credential/callback for local, or https://<your-host>/rest/oauth2-credential/callback for n8n Cloud / self-hosted). For self-hosted, make sure N8N_EDITOR_BASE_URL / WEBHOOK_URL is set so this URL is correct.The credential requests account:read sites:read sites:write domains:read files:write (the files:write scope authorizes Site Deploy uploads). The issued token is bound to both partition API hosts, so one credential works for us and eu — the node picks the right host per operation, so there's no partition setting to configure.
FAQs
n8n community node to manage Hostsmith sites, domains, and account
The npm package @hostsmith/n8n-nodes-hostsmith receives a total of 9 weekly downloads. As such, @hostsmith/n8n-nodes-hostsmith popularity was classified as not popular.
We found that @hostsmith/n8n-nodes-hostsmith demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.