I mean, what command are you running and what output are you seeing? As far as I’m aware, Pulumi does nothing to specifically prevent using a private NPM package, but you will have to be authenticated as normal. In fact, I don’t believe Pulumi even invokes NPM on your behalf, so I’d be surprised if a Pulumi cli invocation led to this error.