News for hackers. Stuff that matters.

A comment on DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware. Parent comment

Re:DuckDB NPM packages 1.3.3 and 1.29.2 compromised with mal... by galaxy_gas on Wednesday September 10, 2025 @12:26AM (#45193265)
The PHP primary package manager does this similar in what you write - https://getcomposer.org/download/

It is amazing that a duckdb could be worse than decade old PHP for something such as this.

[ Parent | on HN ]

There are no comments on this comment yet.