npm extends recovery-code security holds to all accounts - GitHub Changelog

npm now places a temporary 72-hour security hold on any account after a successful recovery-code sign-in, extending a protection that previously applied only to high-impact accounts. This change applies to…

Raccontata dagithub.blog