by: xpoolPosted on:

DuckDB NPM Account Compromised, Leading to Malicious Software Release

SlowMist Technology’s Chief Information Security Officer, 23pds, revealed that the DuckDB NPM account was compromised earlier today. As a result, malicious versions of DuckDB and duckdb-wasm were released. These malicious software variations mirror the wallet-stealing malware identified in yesterday’s supply chain attack. Users are urged to be cautious and proactively implement security measures to mitigate potential risks.

Related posts:

  1. New Crypto Wallet Malware Threat Exploits Open-Source Software
  2. New Malware Leverages Ethereum Smart Contracts for Stealthy Deployment
  3. DuckDB NPM Account Hack Leads to New Malware Release: Security Concerns Raised
  4. ModStealer Malware Threatens Crypto Wallets Across Platforms