CVE-2017-16203

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16203

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16203

The CVE-2017-16203 entry concerns the coffe-script npm package, which (per multiple sources) exfiltrates sensitive data (e.g., private SSH keys and bash history) to attacker-controlled locations during installation. Affected behavior is the package’s malware-like activity; all versions have been ...