Back to overview
Resolved

Some npm packages may return incorrect download URLs, causing installation failures.

Sep 28, 2026 at 6:44pm UTC
Affected services
Secure Registry

Resolved
Sep 28, 2026 at 7:27pm UTC

The issue has been resolved, and all affected services are operating normally.

Created
Sep 28, 2026 at 6:44pm UTC

We identified a caching issue affecting metadata responses for some npm packages served through Secure Registry. Affected responses may contain package download URLs pointing to a different registry endpoint than the one configured by the customer. This may cause package installation or dependency resolution failures.
The issue occurs when registry deployments share cached metadata containing deployment-specific download URLs. We have identified the root cause and are preparing a fix to isolate these cached responses by registry endpoint.