Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan (RAT). The list of identified packages, is below - ...

This is a bit hacky and searches for repos containing the string .duckdb_extension, so it's not 100% reliable. Extensions that are not included in the DuckDB core (and are not listed in the output ...