A coordinated campaign has been observed targeting a recently disclosed critical-severity vulnerability that has been present ...
This is a bit hacky and searches for repos containing the string .duckdb_extension, so it's not 100% reliable. Extensions that are not included in the DuckDB core (and are not listed in the output ...