CVE-2017-16202: Cofeescript Project Cofeescript

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

Affected products

• Cofeescript Project Cofeescript: version 0.0.1 only

Published 2018-06-07. Last modified 2026-06-17.