npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
GitHub added npm staged publishing with mandatory 2FA approval to reduce software supply chain attack risks.
More info