
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@prokodo/n8n-nodes-pdf-toolkit
Advanced tools
Merge, split, render and OCR PDFs directly in your n8n workflows — developed by prokodo.
Using an older n8n (e.g. 1.88)? It may still work if you align n8n-core / n8n-workflow versions. For best results, upgrade n8n.
# choose your custom folder (default ~/.n8n)
export N8N_CUSTOM_EXTENSIONS=~/.n8n
# install the node into that folder
npm install --prefix "$N8N_CUSTOM_EXTENSIONS" @prokodo/n8n-nodes-pdf-toolkit@latest
# start n8n
n8n start
FROM n8nio/n8n:latest
ENV N8N_CUSTOM_EXTENSIONS=/home/node/.n8n
ENV NODE_PATH=/home/node/.n8n/node_modules
USER node
RUN npm install --prefix /home/node/.n8n @prokodo/n8n-nodes-pdf-toolkit@latest
After starting n8n, search in the node picker for “prokodo (PDF Toolkit)” Internal name: prokodoPdfToolkit
# in this repo
npm ci
npm run build
# make your package linkable
npm link
# link into your n8n custom extensions folder
npm link @prokodo/n8n-nodes-pdf-toolkit --prefix ~/.n8n
# start n8n with your custom folder
export N8N_CUSTOM_EXTENSIONS=~/.n8n
n8n start
Publish-ready tip: This package publishes compiled JS from dist/ to npm. You don’t need to commit dist/ to Git. To support installs straight from GitHub, add:
"scripts": {
"prepare": "npm run build"
}
…and commit src/ (not dist/).
Operation: Merge PDFs
Operation: Split PDF
Operation: PDF to Images
Advanced Settings (optional):
OCR auto-detects whether the incoming file is a PDF or image via MIME/bytes.
Ensure N8N_CUSTOM_EXTENSIONS points to the folder where you installed the package. Restart n8n and search for “prokodo (PDF Toolkit)”. Verify your n8n version (≥ 1.103 recommended).
Open the node in the editor and ensure all visible fields for the chosen operation are set. If you switched operations, re-open and re-save the node. canvas native dependency errors
apt-get update && apt-get install -y \
libcairo2 libpango-1.0-0 libjpeg62-turbo libgif7 librsvg2-2 \
&& rm -rf /var/lib/apt/lists/*
apk add --no-cache cairo pango jpeg giflib librsvg
Prefer Debian-based n8n images for smoother canvas support.
PRs welcome!
npm ci
npm run build
Open a PR with what changed and how to test it.
This library is published under MIT.
© 2025 prokodo. Visit us at prokodo.com.
FAQs
PDF toolkit for n8n (merge, split, images, OCR)
The npm package @prokodo/n8n-nodes-pdf-toolkit receives a total of 25 weekly downloads. As such, @prokodo/n8n-nodes-pdf-toolkit popularity was classified as not popular.
We found that @prokodo/n8n-nodes-pdf-toolkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.