Time
15:19
SlowMist: DuckDB NPM account compromised, please be aware of risk prevention
September 9, 2025
CoinFeed News
SlowMist Technology's Chief Information Security Officer, 23pds, posted on the X platform that the DuckDB NPM account had been compromised. Early this morning, malicious versions of duckdb and duckdb-wasm were released. These malware are consistent with the wallet-stealing malware seen in yesterday's supply chain attack. Be mindful of potential risks.