npm sign up process is completely broken

[promptrotator]

Select Topic Area

Question

Body

Tried to login on multiple different browsers and devices and I'm getting the same captcha not loaded issue, is the site still being maintained? Seems schizophrenic that trillions of dollars of value relies on this website that doesn't even have modern standards for auth.

[mecodeatlas]

Hi there, @promptrotator! Thanks for flagging this.

I just tested the npm sign-up flow on my side and the CAPTCHA loaded normally. Could you let us know if you're still experiencing the issue?

Thank you very much!

[promptrotator]

Yes, still experiencing this issue. Maybe it's an IP range that's blocked at the Arkose level?

[promptrotator]

Connecting to '' violates the following Content Security Policy directive: "connect-src api.funcaptcha.com api.arkoselabs.com github-api.arkoselabs.com". The request has been blocked.

[promptrotator]

otherwise I'm getting "creation failed, contact support".

[ash-iiiiish]

Diagnostic Steps :

  Verify CAPTCHA Domain Access: Visit https://octocaptcha.com/test directly. If it does not display "Connection successfully made!", your network is blocking it. Also test the Arkose Labs demo at https://client-demo.arkoselabs.com/github to see if the CAPTCHA loads there .
  
  Check Browser Configuration: Ensure JavaScript is enabled and your browser is supported. Temporarily disable all browser extensions, particularly ad blockers and privacy tools .
  
  Use a Clean Network: Disable any VPN or proxy. The most effective method is to turn off Wi-Fi on your mobile device and attempt login using cellular data (4G/5G/LTE), which provides a clean, residential IP address .

Alternative Workaround:

  If the issue persists, use the social login option. On the login page, select "Continue with Google" (or other provided social account). This method often bypasses the CAPTCHA requirement entirely . After successful login, you can add and verify your preferred email address in account settings.
  
  If you have made multiple failed attempts, wait at least 24 hours before trying again with a clean network connection, as your IP may be in a temporary cooldown state .

[shivrajcodez]

Hi there,

That issue is usually related to the CAPTCHA service failing to load rather than the login system itself. Since the same problem appears across multiple browsers and devices, it’s often caused by something blocking the CAPTCHA script before it can render.

A few things that are worth checking:

1. Network or DNS filtering
Some networks (corporate networks, strict ISPs, Pi-hole setups, etc.) block domains used by CAPTCHA providers. If possible, try logging in from a different network (for example a mobile hotspot) to see if the CAPTCHA loads.

2. Script or privacy blockers
Extensions such as ad blockers, privacy blockers, or script blockers can prevent CAPTCHA from loading. Temporarily disabling them or using a clean browser profile can help rule this out.

3. Region or firewall restrictions
Certain CAPTCHA providers rely on external domains that may be restricted depending on location or firewall configuration.

4. Check the browser console
If you open Developer Tools and look at the Console or Network tab, you might see blocked requests related to the CAPTCHA domain. That can usually reveal what’s preventing it from loading.

Regarding maintenance: most large platforms still rely on third-party CAPTCHA providers as part of their authentication flow. When those scripts fail to load due to blocking or connectivity issues, the login process can get stuck even though the core auth system is working.

If none of the above helps, it would be worth reporting the issue directly to the maintainers with:

• browser + version
• operating system
• network environment (home, VPN, corporate network, etc.)
• any console errors you see

That information usually helps them identify whether it’s a configuration issue or a problem with the CAPTCHA provider.

Hope that helps narrow it down.