vue-cli: Error installing vue-cli due to security issue with dependency

Version

3.1.1

Reproduction link

https://cli.vuejs.org/guide/installation.html

Node and OS info

yarn 1.10.1, Windows 10

Steps to reproduce

Simply run yarn global add @vue/cli

What is expected?

Successful installation

What is actually happening?

Fatal error occurs: error No valid versions found for “flatmap-stream”. The package may be unpublished.


None

About this issue

  • Original URL
  • State: closed
  • Created 6 years ago
  • Reactions: 12
  • Comments: 17 (4 by maintainers)

Most upvoted comments

This is due to flatmap-stream being unpublished because it was the source of malware. The whole sordid story is here: https://github.com/dominictarr/event-stream/issues/116

vue-cli maintainers: I think (I am not an expert) you need to ensure that vue-cli doesn’t drag in the malware.

Should have been fixed now.

i got this error while installing @vue/cli npm ERR! Unexpected end of JSON input while parsing near ‘…endencies":{“async”:"’

npm ERR! A complete log of this run can be found in: npm ERR! C:\Users\Ezra\AppData\Roaming\npm-cache_logs\2019-09-26T12_57_54_328Z-debug.log

Should have been fixed now.

how?