npm has introduced two-factor authentication requirements for publishing packages and new controls that allow maintainers to restrict package installations, directly addressing the growing threat of supply chain attacks where attackers compromise develope
Read the full article: https://thehackernews.com/2026/05/npm-adds-2fa-gated-publishing-and.html