npm.js - account qix and duckdb_admin compromised and associated CVEs allocated

https://vulnerability.circl.lu/bundle/289697c2-61dc-410f-8343-aba0be87728d