Feb 142026 Npm’s Update to Harden Their Supply Chain, and Points to Consider Npm’s token overhaul boosts security, but MFA bypass, phishing, and console access still enable supply-chain attacks.
