Lucene search
Veracode Vulnerability DatabaseVERACODE:6710HistoryJun 08, 2018 - 2:16 a.m.
Malicious Typo-Squatting
2018-06-0802:16:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
53.8%
cofee-script is a maliciously typo-squatting package. During the installation of these packages, the user’s private SSH key and bash history are set to a third party server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cofee-script | le | 1.0.1 |
References
Related
prion
prion
Information disclosure
2018-06-07 02:29:00
cve
cve
CVE-2017-16206
2018-06-07 02:29:06
nodejs
nodejs
Exfiltrates data on installation
2017-10-04 23:26:52
osv
osv
cofee-script is malware
2018-08-06 20:12:46
github
github
cofee-script is malware
2018-08-06 20:12:46
cvelist
cvelist
CVE-2017-16206
2018-06-07 02:00:00
nvd
nvd
CVE-2017-16206
2018-06-07 02:29:06
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00