News for hackers. Stuff that matters.

A comment on NPM stylus package contained malicious code and was removed from the registry.

Re:NPM stylus package contained malicious code and was remov... by kontercola on Wednesday July 23, 2025 @06:48AM (#44657709)
My workaround:

Add this on your package.json on the end of file bevor last }:

  },
  "overrides": {
    "stylus": "0.0.1-security"
  }
[ Parent | on HN ]
Re:NPM stylus package contained malicious code and was remov... by okcdz on Wednesday July 23, 2025 @08:45AM (#44658600)
It seems this doesn't work. The package is empty, it can't function. It makes the world stop, which is terrible!
[ Parent | on HN ]
Re:NPM stylus package contained malicious code and was remov... by dale_lakes on Wednesday July 23, 2025 @09:39AM (#44659138)
Random internet person: Do not do this ^ . Wait for the package to be restored by npmjs, or use the workaround in the pinned issue on the stylus repo.
[ Parent | on HN ]