coffe-script

1 known vulnerabilities.

Malicious versions reported for this package

MAL-2025-17263 — all versions · Aug 14, 2025

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2017-16203

coffe-script is malware

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

HackerOne coffeescript node module coffe-script npm

Jun 7, 2018