News for hackers. Stuff that matters.

A comment on NPM stylus package contained malicious code and was removed from the registry.

Re:NPM stylus package contained malicious code and was remov... by yoavfr on Wednesday July 23, 2025 @01:00AM (#44655853)
A quick workaround if you're affected by a deep dependency and don't rely on stylus directly - add `"overrides": {"stylus": "0.0.1-security"}` to your package.json
[ Parent | on HN ]

There are no comments on this comment yet.