npm extends recovery-code security holds to all accountsBy RepublisherSeptember 11, 2026 npm now places a temporary 72-hour security hold on any account after a successful recovery-code sign-in, extending a protection that…
