Hacker News new | ask | show | jobs
by binarymax 921 days ago
Not sure what you mean. Every time I publish to NPM it prompts me for a one time code.
1 comments
mikeryan 921 days ago
Sounds like they’re publishing to npm with a GitHub action which can be done with an automation token which bypasses 2fa
link