Lucene search
+L

11 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.8 views

Malicious code in cofee-script (npm)

The package cofee-script was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.5 views

MAL-2025-17261 Malicious code in cofee-script (npm)

The package cofee-script was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2018/08/06 8:12 p.m.61 views

GHSA-C9RJ-PGXV-84JC cofee-script is malware

The cofee-script package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found cofee-script installed in your...

7.5CVSS7.6AI score0.01177EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/08/06 8:12 p.m.27 views

cofee-script is malware

The cofee-script package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found cofee-script installed in your...

7.5CVSS7.3AI score0.01177EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2018/06/12 12:00 a.m.237 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.4AI score0.02342EPSS
SaveExploits4References108
Veracode
Veracode
added 2018/06/08 2:16 a.m.20 views

Malicious Typo-Squatting

cofee-script is a maliciously typo-squatting package. During the installation of these packages, the user's private SSH key and bash history are set to a third party server...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2010/10/19 12:00 a.m.243 views

Microsft COFEE v1.1.2 DLL Hijacking Exploit

=========================================== Microsft COFEE v1.1.2 DLL Hijacking Exploit =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// //...

SaveExploits0
zdt
zdt
added 2010/10/16 12:00 a.m.32 views

Microsft COFEE v1.1.2 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =========================================== Microsft COFEE v1.1.2 DLL Hijacking Exploit =========================================== =========================================== Microsft COFEE v1.1.2 DLL Hijacking Exploit...

6.8AI score
SaveExploits0
ThreatPost
ThreatPost
added 2009/12/14 5:17 p.m.10 views

Hackers Target MS Police Software

Hackers have released software they say sabotages a suite of forensics utilities Microsoft provides for free to hundreds of law enforcement agencies across the globe known as Computer Online Forensic Evidence Extractor COFEE. Read the full article. The Register...

4.1AI score
SaveExploits0References2
ThreatPost
ThreatPost
added 2009/11/10 2:34 p.m.12 views

Microsoft's Police Forensic Tool Leaked to Bad Guys

Microsoft’s Computer Online Forensic Evidence Extractor COFEE has made it into the hands of pirates, and their virtual ships are distributing it. The COFEE application lets officers grab data from password-protected or encrypted sources. That means you can now break the law twice over: download t...

1.6AI score
SaveExploits0References2
ThreatPost
ThreatPost
added 2009/10/19 6:59 p.m.133 views

Free COFEE Helps Law Enforcement Forensics

Microsoft has announced plans to give away free versions of its COFEE Computer Online Forensic Evidence Extractor utility to help law enforcement agencies in cyber-crime investigations. COFEE uses digital forensic technologies to help investigators gather evidence of live computer activity at the...

9.3CVSS1.5AI score0.99945EPSS
SaveExploits33References1
Rows per page
Query Builder