Skip to content
OpenAdvisories

Package · npm

@duckdb/node-api

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-59037

    DuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malware

    DuckDB is an analytical in-process SQL database management system. On 08 September 2025, the DuckDB distribution for Node.js on npm was compromised with malware (along with several other packages). An attacker published new versions of four of DuckDB's packag…

    duckdb duckdb-node @duckdb/node-api @duckdb/duckdb-wasm npm