@aral Haven't followed through, but isn't this the version that some users reported messing with permissions [1]? 5.7.1 seems to have fixed the issue [2], so maybe use that instead?
[1] - https://news.ycombinator.com/item?id=16435305
[2] - https://github.com/npm/npm/releases/tag/v5.7.1