CVE-2017-16206

CVE-2017-16206 corresponds to the npm package cofee-script, which is malware that exfiltrates sensitive data (notably a user’s private SSH key and bash history) to attacker-controlled locations during installation. Publicly reported details across multiple Connected documents confirm that all ver...

CVE-2017-16206

The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...