Technology ❯ Internet Security ❯ Account Compromise ❯ Two-Factor Authentication
The breach began with a fake npm 2FA reset that let attackers push malicious updates to widely used libraries.
