CVE-2017-16202

CVE-2017-16202 corresponds to the cofeescript npm package, which is malware. The provided data confirm that the package exfiltrates sensitive data (notably private SSH keys and bash history) to attacker-controlled locations during installation. All versions have been unpublished from npm. The ris...