GitHub have posted a blog post detailing everything here https://github.blog/2022-05-26-npm-security-update-oauth-tok...