github: Restricting npm bypass-2FA granular access tokens
npm granular access tokens configured to bypass 2FA can no longer be used for sensitive account, organization, and package management actions. Those operations now require an interactive 2FA challenge.