All updates
github: Restricting npm bypass-2FA granular access tokens
Jul 31, 2026
npm granular access tokens configured to bypass 2FA can no longer be used for sensitive account, organization, and package management actions. Those operations now require an interactive 2FA challenge.
- Source: GitHub