All updates
Written by Jul 31, 2026

github: Restricting npm bypass-2FA granular access tokens

Jul 31, 2026

npm granular access tokens configured to bypass 2FA can no longer be used for sensitive account, organization, and package management actions. Those operations now require an interactive 2FA challenge.

Sponsored by GitAds