Your assumption appears to be incorrect. If you set up 2FA in "auth-and-writes" mode, it does require a 2FA challenge to publish. Docs: https://docs.npmjs.com/

Your assumption appears to be incorrect. If you set up 2FA in "auth-and-writes" mode, it does require a 2FA challenge to publish. Docs: https://docs.npmjs.com/getting-started/using-two-factor-authentication https://docs.npmjs.com/getting-started/using-two-factor-auth...