PANews reported on September 9th that SlowMist Technology's Chief Information Security Officer, 23pds, posted on the X platform that the DuckDB NPM account had been compromised. Early this morning, malicious versions of duckdb and duckdb-wasm were released. These malware are consistent with the wallet-stealing malware seen in yesterday's supply chain attack. Be mindful of potential risks.