The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.Referenceshttps://nodesecurity.io/advisories/542
