It doesn't require 2FA in general, but it does for people with publish rights fo...

		bakkoting 18 days ago \| parent \| context \| favorite \| on: Shai-Hulud malware attack: Tinycolor and over 40 N... It doesn't require 2FA in general, but it does for people with publish rights for popular packages, which covers most or all of the recent security incidents. https://github.blog/changelog/2022-11-01-high-impact-package...