
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
n8n-nodes-cloudconvert
Advanced tools
This is an n8n community node. It lets you use CloudConvert in your n8n workflows.
CloudConvert is an online service providing all sorts of file processing / transformation features, that can be used to convert or tweak PDFs, images, ebooks, audio, documents, etc...
n8n is a fair-code licensed workflow automation platform.
Installation
Operations
Credentials
Compatibility
Usage
Resources
Follow the installation guide in the n8n community nodes documentation.
Authentication relies on an API key that you can generate from your CloudConvert dashboard. Both live and sandbox environments are supported. You will likely need the task.read
and task.write
scopes, but the Trigger node also requires the webhook.read
and webhook.write
scopes.
Note that sandbox credentials are separate from live credentials.
Tested on n8n 0.206.1
Note that it's strongly recommended to perform your tests against the sandbox environment, which needs to be enabled first and which uses a separate API key. Note that:
md5
hash).The most useful operation is to send new conversion jobs to CloudConvert. The definition of each job is done in JSON format, and the CloudConvert Job Builder UI can be used to build the job definition visually and interactively, and copy-paste the resulting JSON.
Here's a sample workflow / node definition:
When checked, in the Create Job operation, the Upload Input Binaries option will cause the following:
import/base64
task.autoimport-<binary_name>
, where <binary_name>
is the property name holding the attachmentIn the Create Job operation (only if the call is made synchronously), as well as in the Trigger node, there is an option to automatically download any resulting file exported by the job upon completion. Note that:
export/url
tasks are supported<task_name>_<N>
where:
<task_name>
is the name of the export task<N>
is the sequence number - since an export task may output more than one file. This will most often be 0
The Trigger node can optionally enforce signature verification on incoming calls. It will automatically fetch the signature key from the webhook definition in CloudConvert, and will use it to validate the signature sent in the webhook calls in the CloudConvert-Signature
HTTP header, to ensure that the call is indeed being initiated from CloudConvert.
When enabled, incoming webhook calls failing validation will be silently ignored.
FAQs
A Node to send file conversion jobs to cloudconvert.com
The npm package n8n-nodes-cloudconvert receives a total of 150 weekly downloads. As such, n8n-nodes-cloudconvert popularity was classified as not popular.
We found that n8n-nodes-cloudconvert demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.