npm security update: Classic token creation disabled and granular token changes - GitHub Changelog
github.blog
Editor’s note (November 5, 2025): We’ve updated this post to explicitly clarify that the affected tokens are npm tokens. Today marks another milestone in our ongoing effort to strengthen npm’s…