Lucene search
Veracode Vulnerability DatabaseVERACODE:6709HistoryJun 08, 2018 - 2:14 a.m.
Malicious Typo-Squatting
2018-06-0802:14:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
53.8%
coffe-script is a maliciously typo-squatting package. During the installation of these packages, the user’s private SSH key and bash history are set to a third party server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| coffe-script | le | 1.0.1 |
References
Related
prion
prion
Information disclosure
2018-06-07 02:29:00
cvelist
cvelist
CVE-2017-16203
2018-04-26 00:00:00
cve
cve
CVE-2017-16203
2018-06-07 02:29:06
nvd
nvd
CVE-2017-16203
2018-06-07 02:29:06
nodejs
nodejs
Exfiltrates data on installation
2017-10-04 23:29:36
osv
osv
coffe-script is malware
2018-08-06 20:06:29
github
github
coffe-script is malware
2018-08-06 20:06:29
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00