pacote: decode password before passing it on

Author: zkat

lib/config/pacote.js

@@ -1,6 +1,7 @@
 'use strict'
 
 const BB = require('bluebird')
+const Buffer = require('safe-buffer').Buffer
 
 const cp = require('child_process')
 const npm = require('../npm')
@@ -60,7 +61,10 @@ function pacoteOpts (moreOpts) {
       if (key === '_authToken') {
         opts.auth[nerfDart].token = val
       } else if (key.match(/password$/i)) {
-        opts.auth[nerfDart].password = val
+        opts.auth[nerfDart].password =
+        // the config file stores password auth already-encoded. pacote expects
+        // the actual username/password pair.
+        Buffer.from(val, 'base64').toString('utf8')
       } else if (key === 'always-auth') {
         opts.auth[nerfDart].alwaysAuth = val
       } else {