MAL-2025-17262 Malicious code in cofeescript (npm)

The package cofeescript was found to contain malicious code...

Malicious code in cofeescript (npm)

The package cofeescript was found to contain malicious code...

cofeescript is malware

The cofeescript package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found cofeescript installed in your...