mattbilson's comments

On: NPM debug and chalk packages compromised

[mattbilson]

Completely understand people getting phished.

How long before npm mandates using phishing resistant mfa? At least for accounts that can publish packages with this may downloads.