NPM: Require 2FA confirmation to change email, issue token, alter 2FA methods

1 comments

• croemer 5 hours ago

  Currently, as long as you're logged in, npm will not ask for password nor 2FA token for anything. You can change email, generate tokens, add/remove 2FA at will.