#github-security-advisory on Hacker News

2 stories tagged github-security-advisory, newest first.

Screenshot of github.com: DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware

DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware (github.com)

367 points by tosh 1 year ago | 263 comments

GitHub security advisory reporting that DuckDB npm packages (duckdb 1.3.3, node-api, node-bindings, duckdb-wasm 1.29.2) were published with malware, listing patched versions.

duckdb npm supply-chain-attack malware

Screenshot of github.com: Malicious versions of Nx and some supporting plugins were published

Malicious versions of Nx and some supporting plugins were published (github.com)

427 points by longcat 1 year ago | 421 comments

GitHub security advisory from the nrwl/nx repository reporting that malicious versions of Nx and several supporting npm plugins were published.

supply-chain-attack nx npm malware

#github-security-advisory on Hacker News

DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware(github.com)

Malicious versions of Nx and some supporting plugins were published(github.com)

DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware (github.com)

Malicious versions of Nx and some supporting plugins were published (github.com)