Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] npm couchdb database is getting spammed with hundreds of thousand of new sequence numbers #8167

Closed
2 tasks done
6mile opened this issue Mar 18, 2025 · 1 comment
Closed
2 tasks done
Labels
Registry specific to registry implementation

Comments

@6mile
Copy link

6mile commented Mar 18, 2025

Is there an existing issue for this?

  • I have searched the existing issues

This issue exists in the latest npm version

  • I am using the latest npm

Current Behavior

The production npm couchdb instance https://skimdb.npmjs.com/registry is experiencing about 30 times the normal amount of package changes. Typically, there are an average of about 30k new sequence numbers created in that CouchDB instance. Yesterday, there were 284381 new sequence numbers, and in the last 18 hours, there have been over 812,000 new sequence numbers. Something is really wrong here.
This does not look like malicious actors are creating new spam packages. Instead, all the packages getting these new sequence numbers have the last modified dates of May 18-22, 2022.

Moreover, since sequence 39472491 all package updates made to the production npm couchdb are in alphabetical order!

Image
Image
Image
Image
Image

Expected Behavior

Roughly 30,000 package changes a day, not 800,000!

Steps To Reproduce

  1. Run curl -s "https://skimdb.npmjs.com/registry/" and compare that against historical trends.

Environment

  • npm:
  • Node.js:
  • OS Name:
  • System Model Name:
  • npm config:
; copy and paste output from `npm config ls` here
@6mile 6mile added Bug thing that needs fixing Needs Triage needs review for next steps labels Mar 18, 2025
@6mile 6mile changed the title [BUG] npm couchdb database is getting spamming with hundreds of thousand of new sequence numbers [BUG] npm couchdb database is getting spammed with hundreds of thousand of new sequence numbers Mar 18, 2025
@milaninfy milaninfy added Registry specific to registry implementation and removed Needs Triage needs review for next steps labels Mar 18, 2025
@milaninfy
Copy link
Contributor

Closing: this looks to be an issue with the registry which is outside the scope of this repo. For registry support please go to npmjs.com/support. If you believe this is a bug with the cli, please provide further clarifying details.

@milaninfy milaninfy removed the Bug thing that needs fixing label Mar 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Registry specific to registry implementation
Projects
None yet
Development

No branches or pull requests

2 participants