npm adds preventive account protection for high-impact accounts

Short summary

npm has implemented temporary preventive safeguards for high-impact accounts—those responsible for the registry's most widely used packages—to strengthen protection against account-takeover attacks. The new feature automatically triggers protective measures when sensitive account changes are detected, providing enhanced security for critical package infrastructure without requiring manual configuration. This addresses the significant risk that account compromises at scale could affect millions of downstream projects relying on widely-used packages.

• •npm adds automatic account protection for high-impact package maintainers
• •Temporary safeguards trigger on sensitive account changes to prevent takeovers
• •Protects critical packages that millions of projects depend on

Generated with AI, which can make mistakes.