Skip to content

Update expected NPM firewall error #271

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
maxrake merged 2 commits into from
Mar 4, 2025
Merged

Update expected NPM firewall error #271

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
2235888
Update expected NPM firewall error
cd-work Mar 3, 2025
cde7019
Merge remote-tracking branch 'origin/main' into npm_error
maxrake Mar 4, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 7 additions & 17 deletions docs/package_firewall/npm.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,25 +37,15 @@ npm config set registry https://<PHYLUM_ORG>%2F<PHYLUM_GROUP>:<PHYLUM_API_KEY>@n
>
> Do not accidentally save your token into your shell history.

A blocked package will show up in `npm` output as missing:
A blocked package will show up in `npm` output as E403:

```text
npm error code E404
npm error 404 Not Found - GET http://:***@npm.phylum.io/<malicious>
npm error 404
npm error 404 '<malicious>@*' is not in this registry.
npm error 404
npm error 404 Note that you can also install from a
npm error 404 tarball, folder, http url, or git url.
```

Alternatively, if only a specific version is affected:

```text
npm error code ETARGET
npm error notarget No matching version found for <malicious>@<version>.
npm error notarget In most cases you or one of your dependencies are requesting
npm error notarget a package version that doesn't exist.
npm error code E403
npm error 403 Could not download <malicious>@<version> due to policy violations:
npm error 403 Blocked by package firewall.
npm error 403 In most cases, you or one of your dependencies are requesting
npm error 403 a package version that is forbidden by your security policy, or
npm error 403 on a server you do not have access to.
```

If you're using `pnpm`, the output will look like this:
Expand Down