DuckDB NPM Account Hack Leads to New Malware Release: Security Concerns Raised

A critical security breach has exposed vulnerabilities in open-source software, potentially impacting developers and raising concerns about the safety of digital finance. The DuckDB project’s NPM account was compromised, leading to the release of malicious packages containing malware that targets cryptocurrency wallets. This incident has triggered a renewed focus on supply chain security risks and demands vigilance from developers.