Skip to content
OpenAdvisories

Package · npm

cofee-script

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2017-16206

    cofee-script is malware

    The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

    cofee-script npm