Re:DuckDB NPM packages 1.3.3 and 1.29.2 compromised with mal...
by speedgoose on Tuesday September 09, 2025 @10:52AM
(#45182742)
I also don’t know why using a unix pipe instead of saving in the file system and executing the file is a significant security risk. Perhaps an antivirus could scan the file without the pipe.
[ Parent
| on HN ]
There are no comments on this comment yet.