{"action":"No fix published. Pin and monitor.","affected":[],"component":"coffee-project","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3fv6-q5xv-fhpw","id":"tcs_01M5KEX7C78MA4TY7BAKE4HVBD","modified_at":"2023-07-27T00:01:55Z","published_at":"2020-09-01T19:50:23Z","references":["https://osv.dev/vulnerability/GHSA-3fv6-q5xv-fhpw","https://www.npmjs.com/advisories/621"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-3fv6-q5xv-fhpw","url":"https://osv.dev/vulnerability/GHSA-3fv6-q5xv-fhpw"}],"summary":"Malicious Package in coffee-project"}