3 ms·

Extension downloads are validated using a signature check to prevent tampering! (I work for DuckDB Labs and MotherDuck)

• immibis 2y ago
  The backdoored version of xz was also signed.