Stop using vsts-NPM-auth, it may be a 0-day
cyrs.substack.com