Malicious code in cofeescript (npm)

The package cofeescript was found to contain malicious code...

MAL-2025-17262 Malicious code in cofeescript (npm)

The package cofeescript was found to contain malicious code...

cofeescript is malware

The cofeescript package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found cofeescript installed in your...