Tech Times on MSN

NPM closes skeleton-key attack surface: bypass tokens lose account control

npm granular access tokens configured to bypass 2FA can no longer create tokens, change maintainers, or manage org membership ...