NPM bypass-2FA tokens can no longer manage accounts or packages | Hacker News Reader