News for hackers. Stuff that matters.
Re:DuckDB NPM packages 1.3.3 and 1.29.2 compromised with mal... by Ekaros on Tuesday September 09, 2025 @02:35PM (#45186489)
Running code as privileged user is always a risk.

Running scripts even more so.

One day someone might decide simply to exploit whatever trust they have.

Actually I wonder how much black market would pay for rights to change reasonable popular script like that...

There are no comments on this comment yet.