CVE-2017-16205

Published: Jun 7, 2018

Modified: Sep 16, 2024

PUBLISHED

The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

Vendor	Product	Versions
HackerOne	coffeescript node module	affected `1.0.1`

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.