I'm currently working on a project and I came across something really weird which looks like a bug.

It is really simple and I'm sorry if I can't detail more than that... Don't hesitate to ask me to run commands to investigate.

$ npm unpublish @generalizers/[email protected]
- @generalizers/[email protected]

As you can see, npm clearly tells me that the package version 1.0.1 was taken off the npm registry. But when I go on npmjs.com here, you can see that the package with that version still exists... (sorry if the link expires one day, but trust me, the version is still online)

Please note that I tried to go through what npm recommends you when you find a bug. That is to go on hackerone.com. But it was too difficult to submit anything without having access to coherent log from the CLI...

CodePudding user response：

Does this answer help you ?

If the version is older than 24 hours, then the unpublish will fail, with a message to contact [email protected].

If you contact support, they will check to see if removing that version of your package would break any other installs. If so, we will not remove it.

You don't seem to get any error while unpublishing, but I suggest you follow the same procedure (contacting NPM).

Cheers