npm now freezes high-impact accounts after risky account changes
aikido.dev | blog | #supply-chain | #open-source | #developer-security | #npm | #social-engineering | #account-security | #supply-chain-security | #2fa | #package-registry | #two-factor-authentication | #registry | #axios | #registry-security | #account-freeze | #cooldown
Summary
npm now puts high-impact accounts into a 72-hour read-only freeze after sensitive changes like email swaps or 2FA recovery-code use, alerting the previous email while installs keep working.
- Published
- Collected
--- id: 2414 title: "npm now freezes high-impact accounts after risky account changes" source_domain: aikido.dev source_url: "https://www.aikido.dev/blog/npm-cooldown-account-changes-announcement" published_at: "2026-06-26 00:00" tags: ["supply-chain", "open-source", "developer-security", "npm", "social-engineering", "account-security", "supply-chain-security", "2fa", "package-registry", "two-factor-authentication", "registry", "axios", "registry-security", "account-freeze", "cooldown"] phying_url: "https://phying.com/item/2414" lang: en --- # npm now freezes high-impact accounts after risky account changes ## Summary npm now puts high-impact accounts into a 72-hour read-only freeze after sensitive changes like email swaps or 2FA recovery-code use, alerting the previous email while installs keep working. ## Intelligence Metadata - **Sources:** aikido.dev - **Published:** 2026-06-26 00:00 - **Original:** https://www.aikido.dev/blog/npm-cooldown-account-changes-announcement - **Phying News:** https://phying.com/item/2414