cofeescript

1 known vulnerabilities.

Malicious versions reported for this package

MAL-2025-17262 — all versions · Aug 14, 2025

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium —

CVE-2017-16202

cofeescript is malware

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

HackerOne coffeescript node module cofeescript npm

Jun 7, 2018