Malicious package (Typosquatting)
The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Advisories for Npm/Cofee-Script package
2018
2017
Exfiltrates data on installation
The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.