# X_TRUST_PUBLISHER_FAILED

## Means

attaching a trusted publisher failed

## Typical cause

npm rejected the call for a reason other than auth — most often `E409`, a stale config from an earlier attempt that must be revoked before it can be replaced

## Fix

the `fix` names the package; revoke the old one (`npm trust list <pkg> --json`, then `npm trust revoke <pkg> --id <id>`) and re-run `bun run scripts/trust-publishers.ts`

[CLI and verify](/error-codes#cli-and-verify)