CVE-2017-16203: Coffescript Project Coffescript

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

Affected products

• Coffescript Project Coffescript: version 1.0.1 only

Published 2018-06-07. Last modified 2026-06-17.