This is going to practically stop remote attacks with stolen credential. But there are a few other attacks that it will not stop. For example the NPM event-stre

This is going to practically stop remote attacks with stolen credential. But there are a few other attacks that it will not stop. For example the NPM event-stream kind of attacks.