[BUG] npm couchdb database is getting spammed with hundreds of thousand of new sequence numbers #8167
Closed
2 tasks done
Labels
Registry
specific to registry implementation
Is there an existing issue for this?
This issue exists in the latest npm version
Current Behavior
The production npm couchdb instance https://skimdb.npmjs.com/registry is experiencing about 30 times the normal amount of package changes. Typically, there are an average of about 30k new sequence numbers created in that CouchDB instance. Yesterday, there were 284381 new sequence numbers, and in the last 18 hours, there have been over 812,000 new sequence numbers. Something is really wrong here.
This does not look like malicious actors are creating new spam packages. Instead, all the packages getting these new sequence numbers have the last modified dates of May 18-22, 2022.
Moreover, since sequence 39472491 all package updates made to the production npm couchdb are in alphabetical order!
Expected Behavior
Roughly 30,000 package changes a day, not 800,000!
Steps To Reproduce
curl -s "https://skimdb.npmjs.com/registry/"
and compare that against historical trends.Environment
; copy and paste output from `npm config ls` here
The text was updated successfully, but these errors were encountered: