News for hackers. Stuff that matters.

A comment on NPM stylus package contained malicious code and was removed from the registry. Parent comment

Re:NPM stylus package contained malicious code and was remov... by dale_lakes on Wednesday July 23, 2025 @09:37AM (#44659112)
The malicious code had nothing to do with the stylus package. One of the maintainers of stylus published malicious code in another package, and GitHub / npmjs response was to nuke ALL packages that he was a maintainer of, including stylus.
[ Parent | on HN ]
Re:NPM stylus package contained malicious code and was remov... by silverwind on Thursday July 24, 2025 @08:34AM (#44669893)
The sensible action would be to remove only the malicious packages and suspend that account.
[ Parent | on HN ]