May 262026 Npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks GitHub added npm staged publishing with mandatory 2FA approval to reduce software supply chain attack risks.
