CVE-2025-59037 — DuckDB is an analytical in-process SQL database management system. On 08 September 2025, the DuckDB distribution for Node.js on npm was compromised with malware (along with several other packages). An — CVE Database · The Intelligence Room