Only 9.27% of all npm developers use 2FA

guest · Jan 7, 2020

Only 9.27% of all npm developers use 2FA
Two-factor authentication not widely adopted on npm [...] the largest package repository on the internet
January 7, 2020
https://www.zdnet.com/article/only-9-27-of-all-npm-developers-use-2fa/

Only 9.27% of all maintainers of npm JavaScript libraries use two-factor authentication to protect their accounts.

The number is incredibly low and a major issue of concern for the npm security team, who'd like to see this figure grow in the coming year.
Today, npm is, by far, the largest JavaScript package manager in the JavaScript ecosystem, but also the largest package repository for any programming language, with more than 350,000 indexed libraries.

This has made npm a prime target for supply-chain attacks, scenarios where hackers breach a developer's npm account in order to insert malicious code inside their libraries. Such incidents have happened in the past years, including 2019.
As such, securing the accounts of npm library owners should be a top priority going forward.
Click to expand...

Log in or Sign up

Only 9.27% of all npm developers use 2FA

guest Guest

Log in or Sign up

Only 9.27% of all npm developers use 2FA

guest Guest

Useful Searches