[SECURITY] `coa` is compromised

***The `coa` package is compromised. Do NOT run `install` on your computer before there's a fix. The CI checks on our repo are failing because of this.***

See the diff: https://my.diffend.io/npm/coa/2.0.2/2.0.4

And the issue: https://github.com/veged/coa/issues/99