Malicious versions reported for this package
- MAL-2025-17264 — all versions · Aug 14, 2025
1 result · Feed
-
High 7.5
coffescript is malware
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.