Description
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Remediation
References
https://nodesecurity.io/advisories/542
Related Vulnerabilities
CVE-2019-14837 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2022-25927 Vulnerability in maven package org.webjars.npm:github-com-faisalman-ua-parser-js
CVE-2022-36313 Vulnerability in maven package org.webjars.npm:file-type
CVE-2015-0254 Vulnerability in maven package taglibs:standard