@@ -26,7 +26,7 @@ class Unpublish extends BaseCommand {
       query: { write: true },
       _isRoot: true,
     })
-    return Object.keys(packument.versions)
+    return Object.keys(packument.versions || {})
   }
 
   static async completion (args, npm) {
@@ -136,6 +136,9 @@ class Unpublish extends BaseCommand {
     }
 
     const versions = await Unpublish.getKeysOfVersions(spec.name, opts)
+    if (versions.length === 0 && spec.type === 'version') {
+      throw this.usageError(`Refusing to delete ${spec.name}@${spec.rawSpec}: the registry returned no versions for ${spec.name}.`)
+    }
     if (versions.length === 1 && spec.rawSpec === versions[0] && !force) {
       throw this.usageError(LAST_REMAINING_VERSION_ERROR)
     }
 
@@ -166,6 +166,49 @@ t.test('unpublish <pkg>@version last version', async t => {
   )
 })
 
+t.test('unpublish <pkg>@version of a packument with no versions', async t => {
+  const { npm } = await loadMockNpm(t, {
+    config: {
+      ...auth,
+    },
+  })
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: 'test-auth-token',
+  })
+  const manifest = registry.manifest({ name: pkg })
+  delete manifest.versions
+  await registry.package({ manifest, query: { write: true } })
+
+  await t.rejects(
+    npm.exec('unpublish', ['test-package@1.0.0']),
+    /the registry returned no versions for test-package/
+  )
+})
+
+t.test('unpublish <pkg>@version of a packument with no versions with --force', async t => {
+  const { npm } = await loadMockNpm(t, {
+    config: {
+      force: true,
+      ...auth,
+    },
+  })
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: 'test-auth-token',
+  })
+  const manifest = registry.manifest({ name: pkg })
+  manifest.versions = {}
+  await registry.package({ manifest, query: { write: true } })
+
+  await t.rejects(
+    npm.exec('unpublish', ['test-package@1.0.0']),
+    /the registry returned no versions for test-package/
+  )
+})
+
 t.test('no version found in package.json no force', async t => {
   const { npm } = await loadMockNpm(t, {
     config: {
Original file line number	Diff line number	Diff line change
`@@ -26,7 +26,7 @@ class Unpublish extends BaseCommand {`
`26`	`26`	`query: { write: true },`
`27`	`27`	`_isRoot: true,`
`28`	`28`	`})`
`29`		`- return Object.keys(packument.versions)`
	`29`	`+ return Object.keys(packument.versions \|\| {})`
`30`	`30`	`}`
`31`	`31`
`32`	`32`	`static async completion (args, npm) {`
`@@ -136,6 +136,9 @@ class Unpublish extends BaseCommand {`
`136`	`136`	`}`
`137`	`137`
`138`	`138`	`const versions = await Unpublish.getKeysOfVersions(spec.name, opts)`
	`139`	`+ if (versions.length === 0 && spec.type === 'version') {`
	`140`	+ throw this.usageError(`Refusing to delete ${spec.name}@${spec.rawSpec}: the registry returned no versions for ${spec.name}.`)
	`141`	`+ }`
`139`	`142`	`if (versions.length === 1 && spec.rawSpec === versions[0] && !force) {`
`140`	`143`	`throw this.usageError(LAST_REMAINING_VERSION_ERROR)`
`141`	`144`	`}`