Malicious code in cofeescript (npm)

The package cofeescript was found to contain malicious code...

MAL-2025-17262 Malicious code in cofeescript (npm)

The package cofeescript was found to contain malicious code...

cofeescript is malware

The cofeescript package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found cofeescript installed in your...

CVE-2017-16202: Embedded Malicious Code

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

PT-2018-6229

Name of the Vulnerable Software and Affected Versions: cofeescript affected versions not specified Description: The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. It is a piece of malware that steals...