From 9fae225277b769824d74125f6973c4b871b894fa Mon Sep 17 00:00:00 2001
From: Sander Declerck <sander.declerck@aikido.dev>
Date: Tue, 21 Apr 2026 09:31:26 +0200
Subject: [PATCH] Make sure rejected promise is not cached in malware list /
 new packages cache

---
 packages/safe-chain/src/scanning/malwareDatabase.js      | 5 ++++-
 packages/safe-chain/src/scanning/newPackagesListCache.js | 1 +
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/packages/safe-chain/src/scanning/malwareDatabase.js b/packages/safe-chain/src/scanning/malwareDatabase.js
index afc8b98..0eccc88 100644
--- a/packages/safe-chain/src/scanning/malwareDatabase.js
+++ b/packages/safe-chain/src/scanning/malwareDatabase.js
@@ -65,11 +65,14 @@ export function openMalwareDatabase() {
 
       return {
         getPackageStatus,
-        isMalware: (name, version) => {
+        isMalware: (/** @type {string} */ name, /** @type {string} */ version) => {
           const status = getPackageStatus(name, version);
           return isMalwareStatus(status);
         },
       };
+    }).catch((error) => {
+      cachedMalwareDatabasePromise = null;
+      throw error;
     });
   }
   return cachedMalwareDatabasePromise;
diff --git a/packages/safe-chain/src/scanning/newPackagesListCache.js b/packages/safe-chain/src/scanning/newPackagesListCache.js
index b6c990e..418dbdd 100644
--- a/packages/safe-chain/src/scanning/newPackagesListCache.js
+++ b/packages/safe-chain/src/scanning/newPackagesListCache.js
@@ -32,6 +32,7 @@ export function openNewPackagesDatabase() {
       .then((newPackagesList) => buildNewPackagesDatabase(newPackagesList))
       .catch((/** @type {any} */ error) => {
         warnOnceAboutUnavailableDatabase(error);
+        cachedNewPackagesDatabasePromise = null;
         return { isNewlyReleasedPackage: () => false };
       });
   }