NPM bypass-2FA tokens can no longer manage accounts or packages
github.blog