1 matches found
DuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malware
The DuckDB distribution for Node.js on npm was compromised with malware along with several other packages. An attacker published new versions of four of duckdb’s packages that included malicious code to interfere with cryptocoin transactions. The following packages and versions are affected: -...
8.6CVSS7.2AI score0.00387EPSS
SaveExploits0References5Affected Software4
20