Get the latest tech news
DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware
The DuckDB distribution for [Node.js](http://node.js/) on [npm](https://www.npmjs.com/) was compromised with malware (along with [several other packages](https://www.aikido.dev/blog/npm-debug-and-c...
An attacker published new versions of four of duckdb’s packages that included malicious code to interfere with cryptocoin transactions. We have also reached out to npm support to actually delete the affected versions. We are reviewing our internal processes to ensure the safety of future releases.
Or read this on Hacker News