npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

tanigawa https://blog.hatena.ne.jp/tanigawa/ TT Malware Log https://malware-log.hatenablog.com/ アプリ: npm サービス: GitHub staged publishing（段階公開）機能認証: 多要素認証 / 二要素認証 / MFA / 2FA 【要点】 ◎GitHubはnpm向けに2FA必須の段階公開機能を導入した。サプライチェーン攻撃対策として不正パッケージ公開を防ぐ狙いがある (The Hacker News) 190 <iframe src="https://hatenablog-parts.com/embed?url=https%3A%2F%2Fmalware-log.hatenablog.com%2Fentry%2F2026%2F05%2F23%2F000000_10" title="npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks - TT Malware Log" class="embed-card embed-blogcard" scrolling="no" frameborder="0" style="display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;"></iframe> Hatena Blog https://hatena.blog 2026-05-23 00:00:00 npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks rich https://malware-log.hatenablog.com/entry/2026/05/23/000000_10 1.0 100%