description: The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
problem types: Embedded Malicious Code (CWE-506)
affected:
{
product: coffeescript node module
vendor: HackerOne
versions:
status: affected, version: 1.0.1
}