hackerone Coffeescript Node Module Vulnerabilities