NPM invalidates use of fine-grained tokens that bypass 2FA | Dark Hacker News