Critical npm supply chain attack response – September 8, 2025

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 08 Sept 2025, 13:00 UTC

duckdb_admin On September 9, 2025, the campaign extended to DuckDB-related packages after theaccount was breached. These releases contained the same wallet-drainer malware, confirming this was part of a coordinated effort targeting prominent npm maintainers. While Vercel customers were not impacted…