Lucene search
Veracode Vulnerability DatabaseVERACODE:6726HistoryJun 08, 2018 - 3:23 a.m.
Malicious Typo-Squatting
2018-06-0803:23:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
0.002 Low
EPSS
Percentile
53.8%
cofeescript is a maliciously typo-squatting package. During the installation of these packages, the user’s private SSH key and bash history are set to a third party server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cofeescript | eq | 1.0.1 |
References
Related
nvd
nvd
CVE-2017-16202
2018-06-07 02:29:06
osv
osv
cofeescript is malware
2018-08-06 20:05:28
prion
prion
Information disclosure
2018-06-07 02:29:00
cvelist
cvelist
CVE-2017-16202
2018-04-26 00:00:00
nodejs
nodejs
Exfiltrates data on installation
2017-10-04 23:27:57
github
github
cofeescript is malware
2018-08-06 20:05:28
cve
cve
CVE-2017-16202
2018-06-07 02:29:06
openvas
openvas
Malicious JavaScript Package Detection
2018-06-12 00:00:00