
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
n8n-nodes-statable
Advanced tools
n8n node for Statable, privacy-first cookieless web analytics. Query visitors, sources, pages, goals and funnels in your workflows.
This is an n8n community node for Statable, privacy-first cookieless web analytics. It reads your analytics inside n8n workflows: visitors, pageviews, sources, pages, countries, goals and funnels.
Use it to post a weekly traffic summary to Slack, alert on a spike in current visitors, copy daily numbers into a spreadsheet, or give an AI agent read access to your analytics.
n8n is a fair-code licensed workflow automation platform.
Follow the installation guide in the n8n community nodes documentation.
On self-hosted n8n: Settings → Community Nodes → Install, then enter n8n-nodes-statable.
The node authenticates with a Statable API key.
stbl_ and is shown only once.See Authentication for key expiry, rotation and permissions.
| Resource | Operation | What it returns |
|---|---|---|
| Report | Query | Totals, a time series or a ranked breakdown for any metrics, date range, grouping and filters |
| Site | Get Many | The sites the key can read, optionally with headline numbers |
| Realtime | Get Current Visitors | Unique visitors active in the last five minutes |
| Property | Get Many | Custom property keys a site has recorded, per event |
| Goal | Get Many | Goals configured for a site |
| Funnel | Get Many | Saved funnels of a site |
| Funnel | Get Report | Visitors, conversion rate and drop-off for each step of a saved funnel |
| Account | Get Subscription | Plan state of the account that owns the key |
The node is available as a tool for the n8n AI Agent.
{ "visit:country": "US", "visit:country:label": "United States", "visitors": 206 }. Turn it off to get the raw response with the query echo and paging meta.Which metrics each breakdown computes is listed in the query reference. An unsupported combination fails with the API's own error message.
Weekly top pages to Slack. Schedule Trigger (Mondays) → Statable (Report → Query, Metrics: Visitors and Pageviews, Date Range: Last 7 Days, Group By: Page, Limit: 10, Compare to Previous Period on) → Slack.
Traffic history to a sheet. Schedule Trigger (weekly) → Statable (Report → Query, Metrics: Visitors, Pageviews, Bounce Rate, Date Range: Last 7 Days, Group By: Day) → Google Sheets (Append Row), one row per day.
Where did sign-ups come from? Statable (Report → Query, Group By: Source, Filters: event is Signup) answers where the visitors who fired the Signup event arrived from.
Custom property breakdown. Use Property → Get Many to find a key, then Report → Query with Group By: Custom Property, Property Key: plan, and a filter event is the event that carries it.
Tested with n8n 2.38. Requires n8n with community nodes API version 1.
FAQs
n8n node for Statable, privacy-first cookieless web analytics. Query visitors, sources, pages, goals and funnels in your workflows.
We found that n8n-nodes-statable demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.