Install error

[Sagoram26]

"npx @claude-flow/cli@latest" and "npx ruflo@latest mcp start" fails to install with
npm error code ECOMPROMISED
npm error Lock compromised
npm 11's metavuln scanner is flagging transitive dependencies pulled in via agentdb as matching known-compromised package versions in the GitHub Advisory Database.
Also
A previously cached npx install of @claude-flow/cli also fails at runtime with:

Error [ERR_MODULE_NOT_FOUND]: Cannot find module
'...\node_modules@claude-flow\cli-core\mcp-tools\types'
imported from '...\node_modules@claude-flow\cli\dist\src\mcp-tools\types.js'

@claude-flow/cli's dist output imports @claude-flow/cli-core as if it were a workspace
package, but that module isn't included in the published package tree — so even a
successful/cached install crashes on start.
do you guys know why and how to fix it ?

[Naingzwehtut]

1. Clear corrupted npm/npx caches

npm cache clean --force
npm cache verify
rm -rf ~/.npm/_npx

Windows PowerShell equivalent

Remove-Item -Recurse -Force "$env:LOCALAPPDATA\npm-cache_npx" -ErrorAction SilentlyContinue
npm cache clean --force
npm cache verify

2. Use Node 22 LTS

nvm install 22
nvm use 22

3. Run the working package

npx --yes @claude-flow/cli@latest mcp start

4. If you must use ruflo, pin the fixed version

npx --yes ruflo@3.7.0-alpha.9 mcp start

5. If cli-core is still missing, install the runtime deps globally

npm install -g @claude-flow/cli-core @claude-flow/mcp @claude-flow/shared @claude-flow/neural @noble/ed25519 @ruvector/rabitq-wasm
npx --yes @claude-flow/cli@latest mcp start

6. Full reset if still broken

npm uninstall -g @claude-flow/cli ruflo claude-flow
npm cache clean --force
rm -rf ~/.npm/_npx
npx --yes @claude-flow/cli@latest mcp start