npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

GitHub has introduced staged publishing on npm, requiring maintainers to approve package releases via two-factor authentication (2FA) to enhance software supply chain security. This feature aims to prevent unauthorized or malicious package distributions by mandating human verification before public installation.