NPM stylus package contained malicious code and was removed from the registry | Heykuki News