node.js - npm安装错误: Error: 404 Not Found: flatmap-stream@0. 1.2

Question

我在 npm install 后收到此错误，

6397 verbose stack Error: 404 Not Found: <a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="d7b1bbb6a3bab6a7faa4a3a5b2b6ba97e7f9e6f9e5" rel="noreferrer noopener nofollow">[email protected]</a>
6397 verbose stack     at fetch.then.res (C:\Users\\AppData\Roaming\npm\node_modules\npm\node_modules\pacote\lib\fetchers\registry\fetch.js:42:19)
6397 verbose stack     at tryCatcher (C:\Users\\AppData\Roaming\npm\node_modules\npm\node_modules\bluebird\js\release\util.js:16:23)
6397 verbose stack     at Promise._settlePromiseFromHandler (C:\Users\\AppData\Roaming\npm\node_modules\npm\node_modules\bluebird\js\release\promise.js:512:31)
6397 verbose stack     at Promise._settlePromise (C:\Users\\AppData\Roaming\npm\node_modules\npm\node_modules\bluebird\js\release\promise.js:569:18)
6397 verbose stack     at Promise._settlePromise0 (C:\Users\\AppData\Roaming\npm\node_modules\npm\node_modules\bluebird\js\release\promise.js:614:10)
6397 verbose stack     at Promise._settlePromises (C:\Users\\AppData\Roaming\npm\node_modules\npm\node_modules\bluebird\js\release\promise.js:693:18)
6397 verbose stack     at Async._drainQueue (C:\Users\\AppData\Roaming\npm\node_modules\npm\node_modules\bluebird\js\release\async.js:133:16)
6397 verbose stack     at Async._drainQueues (C:\Users\\AppData\Roaming\npm\node_modules\npm\node_modules\bluebird\js\release\async.js:143:10)
6397 verbose stack     at Immediate.Async.drainQueues (C:\Users\\AppData\Roaming\npm\node_modules\npm\node_modules\bluebird\js\release\async.js:17:14)
6397 verbose stack     at runCallback (timers.js:810:20)
6397 verbose stack     at tryOnImmediate (timers.js:768:5)
6397 verbose stack     at processImmediate [as _immediateCallback] (timers.js:745:5)

Node 版本为:8.12.0，NPM 版本为 6.1.0 ，

任何帮助将不胜感激。

Answer 1

flatmap-stream 已被 npm 取消发布，因为推测源代码中注入(inject)了恶意代码。

• https://github.com/dominictarr/event-stream/issues/116
• https://www.npmjs.com/package/flatmap-stream
• https://www.theregister.co.uk/2018/11/26/npm_repo_bitcoin_stealer/

如果这是您的软件包的直接依赖项，请将其删除并再次尝试 npm 安装。 如果它是任何已安装软件包的嵌套依赖项，请停止使用该软件包或使用 shrinkwrap 用另一个软件包覆盖它。