NPM stylus package contained malicious code and was removed from the registrynpmjs.com70 pointsvandota year ago