npm @npmjs · 04 Aug 2026
npm is rotating write-scoped npm Granular Access Tokens that bypass 2FA as a precaution following a now-contained security incident. This doesn't affect GitHub personal access tokens. Maintainers should upgrade the npm CLI to v12+ and consider Trusted Publishing.
66 922Views
518Likes
122Reposts
20Replies
8Quotes
153Bookmarks
Is that a lot?
11.2×vs this author's median5 960 views is typical
86Percentile for this authorof 7 recent posts
10.9×vs 100K–1M median6 139 views is typical
45.35%Reachviews ÷ followers
1.00%Engagement rateof viewers reacted