[RoryH]

Anyone maintaining a library with a large audience of consumers should be mandated to use 2FA/MFA, I can only assume from the information here that they only had a set of credentials for authing :-(

[ChrisCinelli]

Having every package management system requiring 2FA to publish is a great idea. It may be a problem though when the build happens on a CI system.