#
DIFF.BLOG
New
Following
Discover
Jobs
More
Top Writers
Suggest a blog
Upvotes plugin
Report bug
Contact
About
Sign up
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS
github: npm install-time security and GAT bypass2fa deprecation
1
·
Sujith Quintelier
·
July 9, 2026, 6:53 a.m.
npm
github
Software Security
Version Updates
Summary
This blog post briefly announces the general availability of npm v12, highlighting the new install-time security defaults and the deprecation of GAT bypass2fa. It references GitHub as the source of this update.
Read full post on quintelier.dev →
MORE POSTS LIKE THIS
github: Staged publishing and new install-time controls for npm
Sujith Quintelier ·
May 23, 2026
npm
github
Aikido Security tracks Shai-Hulud npm package infection surge
Developer Tech ·
Aug 4, 2026
Build & Ship
CI/CD & Release Engineering
Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems
Securityonline ·
May 30, 2026
malware
code security
How GoReleaser strengthened security through GitHub's Secure Open Source Fund
Carlos Alexandro Becker ·
Feb 17, 2026
Open Source
github
Using Octonous as a Product Operations Manager
Blog Mozilla ·
Aug 14, 2026
Expert Opinion
github
GitHub has another tough day
Surfingcomplexity ·
Aug 14, 2026
incidents
resilience
Discover more posts →
AUTHOR
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub
Continue with Google