duckdb npm packages compromised

Compromised duckdb npm packages—duckdb, @duckdb/node-api, @duckdb/node-bindings, @duckdb/duckdb-wasm—shipped malicious versions carrying the same payload as the earlier 2-billion-download npm breach.