CVE-2017-16206: Coffescript Project Coffescript

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

Affected products

• Coffescript Project Coffescript: version 1.0.1 only

Published 2018-06-07. Last modified 2026-06-17.