Why publish will get shasum check failed.

[JacksonTian]

npm ERR! Error: shasum check failed for /var/folders/l1/zlgt5jr93bq8b2hdgpmb48y40000gn/T/npm-7693-IPYBfM45/1405310228858-0.4408377716317773/tmp.tgz
npm ERR! Expected: 8504e98ceab33823321b52f74f206124bf8d43c4
npm ERR! Actual: 1f577417ef8d6f7ec43552dbcb68d73d2e05f1d8

[JacksonTian]

Why i publish any package, it ok. But install it will get the shasum issue?!!!!

[JacksonTian]

ping @isaacs

[othiym23]

This should be on a FAQ somewhere, but don't publish while running npm with versions of Node v0.11.6-v0.11.13 – the version of shasum in the crypto library is broken in those versions and will publish packages with a shasum that will not verify on install. Use 0.10.x instead.

[rlidwka]

the version of shasum in the crypto library is broken in those versions

This sounds like a critical bug in either node.js (because sha function is used in so many places) or npm (because it publishes broken packages).

Is there an issue in node.js issue tracker?

[othiym23]

Yes.