Unverified60% confidenceEventExact time
In the left-pad incident of 2016, developer Azer Koçulu deleted over 270 npm packages due to a dispute over an npm package name, and the 11-line left-pad package caused build failures for a large number of Node.js projects worldwide.
2
Sources
60%
Confidence
Long-term
Relevance
7/22/2026
First Seen
Sources
Related Claims
UnverifiedPrior to this fix, the WorkflowChatTransport entry point mixed references to Node.js native modules, causing errors or unnecessary polyfills to be introduced when bundled by frontend build tools such as Vite or webpack.53% similarUnverified使用 NVM 管理 Node 版本时每个 Node 版本拥有独立的全局包目录，切换版本后全局安装的 Claude Code 可能消失53% similarUnverifiedA large number of test users got stuck on the Node.js installation step because the original documentation did not specify version requirements.52% similarUnverifiedNode.js's post-install script problem stems from npm allowing packages to execute arbitrary code at install time, so malicious packages can read environment variables, steal credentials, and even laterally infect other projects, forming supply chain worms (such as the 2018 event-stream incident).52% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/587150API
curl https://kongchang.com/api/v1/knowledge/claims/587150MCP
get_claim(id=587150)