GitHub moves to tighten npm security amid phishing, malware plague

Hundreds of compromised packages pulled as registry shifts to 2FA and trusted publishing

First seen on theregister.com

Jump to article: www.theregister.com/2025/09/23/github_npm_registry_security/