Lucene search
+L

1 matches found

OSV
OSV
added 2025/09/09 2:39 p.m.7 views

GHSA-W62P-HX95-GF2C DuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malware

The DuckDB distribution for Node.js on npm was compromised with malware along with several other packages. An attacker published new versions of four of duckdb’s packages that included malicious code to interfere with cryptocoin transactions. The following packages and versions are affected: -...

8.6CVSS7.2AI score0.00344EPSS
SaveExploits0References5
Rows per page
Query Builder