Malicious code in stylelint-function-url-no-domain (npm)

The package stylelint-function-url-no-domain was found to contain malicious code...

CVE-2019-18657

Table function url had the vulnerability allowed the attacker to inject arbitrary HTTP headers in the request. Nikita Tikhomirov...