Hacker News new | ask | show | jobs
by veidr 334 days ago 

    This advisory has been withdrawn because the stylus npm package is not malware.
It took a while, but we now have some clarity.