Hey everyone,
I’ve just published a new custom n8n node: n8n-nodes-ransomware-live
This node integrates live ransomware data feeds directly into your n8n workflows. The goal is to make it easier for automation flows to consume threat intelligence data in real time — whether you want to:
-
Monitor ransomware groups’ activity,
-
Enrich your internal threat intelligence pipelines,
-
Push updates into Slack/Teams/Discord,
-
Or trigger automated alerts and tickets in your systems.
Links:
It’s available on npm and GitHub, and can be installed like any other n8n community node. Feedback, contributions, and ideas for improvements are more than welcome!
If anyone here has use cases in CTI, SOC automation, or simply wants to test it out, I’d love to hear what you think.