A quick update regarding NPM on Wix. ⚠️

Hey!

A quick update regarding NPM on Wix.

Yesterday (Nov 24th) a wide scale attack on NPM’s supply chain was discovered, affecting systems worldwide that rely on NPM. In order to safeguard websites built on Wix, we have implemented a full freeze on NPM installations, updates and uninstalls across Wix including editors, CLI, and Vibe.

We understand that this freeze affects and interrupts dev workflows. Our first concern is always your sites’ and your data’s integrity and security and are working to securely return services to full availability as soon as we can.

We have published a known issue article that will be updated as soon as we have more info, and we’ll do our best to keep you updated here as well.

For any additional concerns or questions, or if you experience any unexpected behavior on your site, please contact our customer care team or leave a reply in this topic, and we will do our best to answer as soon as we can.

1 Like

Hey!

A quick update on the temporary freeze we placed on NPM installations and updates earlier this week.

We’ve re-enabled access to NPM installations across Wix - including in the editors, CLI and Vibe. As you continue working on your projects, we encourage everyone to follow best practices: install only trusted dependencies and keep an eye out for any unexpected behaviour.

If you notice anything unusual or have concerns about specific packages, feel free to post here or reach out to Customer Care - we’re here to help.

Thanks again for your patience :folded_hands:


Vibe is currently not yet open due to additional precautions and a production freeze before Black Friday. We will update next week when NPM will re-open on Vibe