Hacker Next
DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malwaregithub.com
393 points by tosh 6 days ago | 283 comments