2018-06-07 02:00:00
hackerone
PUBLISHED
The cofeescript module exfiltrates sensitive data such as a users private SSH key and bash history to a third party server during installation.