That seems like a reasonable title, thank you. In fact, this issue was reported more generally at least a couple of months ago, with 2,818 accounts potentially

That seems like a reasonable title, thank you. In fact, this issue was reported more generally at least a couple of months ago, with 2,818 accounts potentially affected[0]. The intended solution for this is to require 2FA for developers, which NPM are slowly rolling out. [0] https://therecord.media/thousands-of-npm-accounts-use-email-addresses-with-expired-domains/ https://therecord.media/thousands-of-npm-accounts-use-email-...