Further clarifying: npm will revoke all tokens issued before 2018-07-12 12:30 UTC. If you rolled your tokens after that time you will not need to re-issue them.

https://status.npmjs.org/incidents/dn7c1fgrr7ng

See also: https://gist.github.com/localjo/59bb12b7a4789e01e3782cf8a103...

Good to make sure you team members who might have installed within that time period nuke out all their node_modules.