Description
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Remediation
References
https://nodesecurity.io/advisories/541
Related Vulnerabilities
CVE-2022-22984 Vulnerability in npm package @snyk/snyk-hex-plugin
CVE-2018-11775 Vulnerability in maven package org.apache.activemq:activemq-client
CVE-2023-38691 Vulnerability in npm package matrix-appservice-bridge
CVE-2020-7678 Vulnerability in npm package node-import
CVE-2019-10172 Vulnerability in maven package org.codehaus.jackson:jackson-mapper-asl