Https: package injected

Trying to publish Preview or Production and receive error.

...
[13:33:58.361] Previous build caches not available
[13:33:58.859] Cloning completed: 717.000ms
[13:33:59.194] Running "vercel build"
[13:33:59.633] Vercel CLI 44.2.13
[13:33:59.940] Installing dependencies...
[13:34:04.328] npm error code EINVALIDPACKAGENAME
[13:34:04.329] npm error Invalid package name "https:" of package "https:@latest": name can only contain URL-friendly characters.
[13:34:04.330] npm error A complete log of this run can be found in: /vercel/.npm/_logs/2025-07-10T10_34_00_504Z-debug-0.log
[13:34:04.363] Error: Command "npm install" exited with 1
[13:34:04.566] 

Even the packages.json doesn’t contain the “https:” package in v0, the version on github contains this line.

I tried

  1. copied packages.json content from github and replaced it via v0 editor, saved/synced changes
  2. removed “https:” package line via v0 editor, saved/synced changes
  3. the github version shows new commit with 0 changes
0 file changed  +0 -0 lines changed

And “https:” package untouched in package.json in the branch HEAD

    "date-fns": "^3.3.1",
    "embla-carousel-react": "latest",
    "fs": "latest",
    "https:": "latest",
    "input-otp": "latest",

It looks the same as in this thread, but there is no any solution posted Build injecting https: latest in package.json

having sme issue - exactl the same issue can someone from @vercel pls help. @pawlean

The https: is a syntax error, an npm package will never have a : like that

Is your code trying to import anything from a URL somewhere? That would be the most likely culprit for this

As I mentioned - the main issue that there is no such line in v0 code editor, but it automatically appears in the Github after pushing changes.