Description
The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
HackerOne coffeescript node module
1.0.1affected