Skip to content

CRITICAL: Incorrect package content for v9.1.0 served from pub.dev - Verified in UAE and UK #358

@wediabdat2-source

Description

@wediabdat2-source

"We are experiencing a critical issue where pub.dev is serving incorrect package content for flutter_foreground_task version 9.1.0."
"Initially, this was observed in Dubai, UAE. The downloaded flutter_foreground_task-9.1.0.tar.gz has an SHA-256 hash of 9F1B25A81DB95D7119D2C5CFFC654048CBDD49D4056183E1BEADC1A6A38F3E29."
"This hash corresponds to code from an older version (appears to be v3.10.0 or similar), not v9.1.0, leading to API mismatches (e.g., missing printDevLog in init)."
"Crucially, a friend in the UK has also downloaded the package from pub.dev today ([8/12/2025]) and sent the file to me, and when I checked the SHA-256 hash it is the exact same incorrect SHA-256 hash: 9F1B25A81DB95D7119D2C5CFFC654048CBDD49D4056183E1BEADC1A6A38F3E29."
"The expected SHA-256 hash for the correct v9.1.0 (verified by other developers in different regions previously, or by checking older, correctly cached versions if available) is F15A8501865048A092829281A18277C0879007808269A94018698991738D1847."
"This indicates a widespread problem with the distribution of flutter_foreground_task v9.1.0 on pub.dev, potentially affecting multiple regions or even being a global issue with the uploaded package itself."
"This prevents users from utilizing the correct version and is causing build failures. Please investigate urgently with the pub.dev team."

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions