News for hackers. Stuff that matters.

A comment on DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware. Parent comment

Re:DuckDB NPM packages 1.3.3 and 1.29.2 compromised with mal... by pneff on Tuesday September 09, 2025 @07:01AM (#45180354)
There is a detailed postmortem in the linked ticket explaining exactly how this happened.
[ Parent | on HN ]
Re:DuckDB NPM packages 1.3.3 and 1.29.2 compromised with mal... by masfuerte on Tuesday September 09, 2025 @07:10AM (#45180407)
This is the same phishing attack that hit junon yesterday.

https://news.ycombinator.com/item?id=45169657

[ Parent | on HN ]