JavaScript, Nodejs, Security, NPM.
that even well-meaning package authors can be the victim of phishing attempts and password leaks. As a result of the above research, npm did add Two Factor Auth (2FA) to their service. However, even with the addition of 2FA, packages hosted on npm aren’t necessarily uncompromisable. 2FA is optional