npm Community Forum (Archive)

The npm community forum has been discontinued.

To discuss usage of npm, visit the GitHub Support Community.

Due to a recent security incident, all user tokens have been invalidated.

When I run npm install on a local project, I get:

npm WARN notice Due to a recent security incident, all user tokens have been invalidated. Please see https://status.npmjs.org/incidents/dn7c1fgrr7ng for more details. To generate a new token, visit https://www.npmjs.com/settings/~/tokens or run “npm login”.

I signed in again with npm login, but I get the same error.


I am also running into this issue after the recent security breech.

Have tried both npm login and via the web portal. Both logins are successful, but when I go to install a package I get the same “security incident” notice.

Also ran sed -ie '/registry.npmjs.org/d' ~/.npmrc to try to clear my login fields and log in again, but no luck there.


Upgrading npm seems to have fixed it for me


this is a problem for me as well, the reset password form doesn’t work on the npm site and i even made a new npm account on my work email and still having trouble.