Comment by koolba

Here’s a pro tip: Enable 2FA for your NPM account

Not only do you get additional security for 2FA, you also get a prompt for the TOTP pin that makes you question what and where you’re publishing.