Missing Encryption of Sensitive Data
cobalt-cli downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
Advisories for Npm/Cobalt-Cli package
2019
2017
Downloads Resources over HTTP
cobalt-cli downloads resources over HTTP, which leaves it vulnerable to MITM attacks.