找不到npm flatmap-stream@0.1.1

Question

我在下面遇到此错误，但是我的Projecto上没有直接安装此软件包。还有其他人遇到相同的错误吗？该项目在我的本地环境中编译并正确运行，并且仅在将代码上传到heroku服务器时才出现此错误。昨天我在event-stream@3.3.6中遇到了相同的错误，但是我删除了node_modules文件夹，删除了package-lock.json并运行npm install，一切正常。

npm ERR！找不到404：flatmap-stream@0.1.1

            {
                "name": "myproj",
                "version": "0.0.0",
                "scripts": {
                    "ng": "ng",
                    "build": "ng build",
                    "start": "node server.js",
                    "test": "ng test",
                    "lint": "ng lint",
                    "e2e": "ng e2e",
                    "postinstall": "ng build --aot --prod"
                },
                "private": true,
                "dependencies": {
                    "@agm/core": "^1.0.0-beta.5",
                    "@agm/js-marker-clusterer": "^1.0.0-beta.5",
                    "@agm/snazzy-info-window": "^1.0.0-beta.5",
                    "@angular/animations": "^6.1.0",
                    "@angular/cli": "^7.0.5",
                    "@angular/common": "^6.1.0",
                    "@angular/compiler": "^6.1.0",
                    "@angular/compiler-cli": "^6.1.0",
                    "@angular/core": "^6.1.0",
                    "@angular/elements": "^6.1.10",
                    "@angular/forms": "^6.1.0",
                    "@angular/http": "^6.1.0",
                    "@angular/platform-browser": "^6.1.0",
                    "@angular/platform-browser-dynamic": "^6.1.0",
                    "@angular/router": "^6.1.0",
                    "@asymmetrik/ngx-leaflet": "^4.0.0",
                    "@asymmetrik/ngx-leaflet-markercluster": "^1.0.0",
                    "@auth0/angular-jwt": "^2.0.0",
                    "@fortawesome/fontawesome-free": "^5.5.0",
                    "@hackages/ngxerrors": "^6.0.3",
                    "@ng-bootstrap/ng-bootstrap": "^3.3.1",
                    "@ngx-translate/core": "^11.0.0",
                    "@ngx-translate/http-loader": "^4.0.0",
                    "@types/leaflet": "^1.2.13",
                    "@types/leaflet.markercluster": "^1.0.3",
                    "@ultimate/ngxerrors": "^1.4.0",
                    "@webcomponents/custom-elements": "^1.2.1",
                    "bootstrap": "^4.1.3",
                    "core-js": "^2.5.4",
                    "document-register-element": "^1.7.2",
                    "express": "^4.16.4",
                    "hammerjs": "^2.0.8",
                    "js-marker-clusterer": "^1.0.0",
                    "jwt-decode": "^2.2.0",
                    "leaflet": "^1.3.4",
                    "leaflet.markercluster": "^1.4.1",
                    "ng4-loading-spinner": "^1.2.3",
                    "ngx-toastr": "^9.1.1",
                    "ngx-toggle": "^2.0.1",
                    "ngx-ui-switch": "^8.0.0-beta.0",
                    "rxjs": "^6.2.2",
                    "save": "^2.3.2",
                    "snazzy-info-window": "^1.1.1",
                    "zone.js": "~0.8.26"
                },
                "devDependencies": {
                    "@angular-devkit/build-angular": "~0.8.0",
                    "@angular/cli": "^7.0.5",
                    "@angular/compiler-cli": "^6.1.0",
                    "@angular/language-service": "^6.1.0",
                    "@types/jasmine": "~2.8.8",
                    "@types/jasminewd2": "~2.0.3",
                    "@types/node": "~8.9.4",
                    "codelyzer": "~4.3.0",
                    "jasmine-core": "~2.99.1",
                    "jasmine-spec-reporter": "~4.2.1",
                    "karma": "~3.0.0",
                    "karma-chrome-launcher": "~2.2.0",
                    "karma-coverage-istanbul-reporter": "~2.0.1",
                    "karma-jasmine": "~1.1.2",
                    "karma-jasmine-html-reporter": "^0.2.2",
                    "protractor": "~5.4.0",
                    "ts-node": "~7.0.0",
                    "tslint": "~5.11.0",
                    "typescript": "~2.9.2"
                },
                "engines": {
                    "node": "~8.12.0",
                    "npm": "~6.4.1"
                }
            }

Answer 1

您只需要从以下文件中删除以下代码行

• package.lock.json

==>“ flatmap-stream”：“ 0.1.1”
和==>“ flatmap-stream”：{“版本”：“ 0.1.1”，“已解决”：“ https://registry.npmjs.org/ flatmap-stream /-/ flatmap-stream-0.1.1.tgz “，”完整性“：” sha512-lAq4tLbm3sidmdCN8G3ExaxH7cUCtP5mgDvrYowsx84dcYkJJ4I28N7gkxA6 + YlSXzaGLJYIDEi9WGfXzMi}

基本上，节点团队已删除该模块，因为它具有一些恶意代码。

Answer 2

这不是解决方案而是警告

你不应该使用这个包。这是一个恶意包，它已作为依赖包添加到另一个名称为event-stream. flatmap-stream旨在窃取您bitcoins或任何加密货币信息。检查这个出来。检查这一个也。如前所述，您必须跳入。

要继续工作，请遵循SuperUser Sudo解决方案。从.lock文件中删除包并重新安装。