Invalid dependency on non-existent stylus@0.56.0

[jnsbhesaniya98]

Command

add

Is this a regression?

• Yes, this behavior used to work in the previous version

The previous version in which this bug was not present was

No response

Description

When installing dependencies using npm install, the following error is encountered:

npm ERR! 404 Not Found - GET https://registry.npmjs.org/stylus/-/stylus-0.56.0.tgz - Not found
npm error code ETARGET
npm error notarget No matching version found for stylus@0.56.0.
npm error notarget In most cases you or one of your dependencies are requesting
npm error notarget a package version that doesn't exist.
npm notice

Minimal Reproduction

Step 1 : Create a new Angular project using version 13.3.9
Step 2 : npm install
Observe the error:

Exception or Error

Your Environment

13.3.11

Anything else relevant?

No response

[Exac]

The affects projects with @angular/build@20.0.2 as stylus has been removed by NPM.

See stylus/stylus#2938

For those wondering how it is used by Angular:

npm ls stylus
     ├─┬ @angular/build@20.0.2
     │ └─┬ vite@6.3.5
     │   └── stylus@0.64.0

[Risatronex]

Same issue on @angular-devkit/build-angular@0.1102.19

dependency stylus@0.54.8

We are not able to build application

[MitkoTschimev]

If you don't use stylus: here is a temp fix for pnpm but should also work for all other package managers

package.json

{
...
"pnpm": {
    "overrides": {
      "stylus": "npm:stylus@0.0.1-security"
    }
  }
}

[uyennguyendinhtuong]

Update package-lock to use https://github.com/stylus/stylus/archive/refs/tags/0.64.0.tar.gz

[MitkoTschimev]

I don't suggest it until it's clear that the stylus doesn't have malware.

GHSA-fh4q-jc76-r59p
stylus/stylus#2938

[JeanMeche]

Upstream vite issue :

• Stylus package was removed by npm for malicious code vitejs/vite#20461

[jonny64]

same on

"@angular-devkit/build-angular": {
"version": "0.901.15",
"requires": {
        "stylus": "0.54.7",
        "stylus-loader": "3.0.2",

[sidnegi2511]

npm error code ETARGET
npm error notarget No matching version found for stylus@0.58.1.
npm error notarget In most cases you or one of your dependencies are requesting
npm error notarget a package version that doesn't exist.

I got this error just today in the pipeline.

I tried to recreate it by removing package lock and node modules and since then it is not working at alll for me.

We have a UAT deployment today, is there any fix present for this?

[justjcool]

Devs who are using Angular Version < 15 with scss (sass) instead of css, try below

npm cache clean --force

rm -rf node_modules

rm package-lock.json

npm install

I don't know how, but it worked for me. pipelines are working now...

Once urgent release live, do not forget to remove the stylus from the npm packages... until we get proper clarification from NPM.

[nitishSa]

Facing similar issue with our Angular 12 application. Our deployment is stuck. Is there a work around for this stylus dependency?

[JeanMeche]

stylus/stylus#2938 mentions workarounds it the top comment of the issue.

[saraefaf]

Same issue on @angular-devkit/build-angular@0.901.13