Important security changes to npm authentication take effect October 13, 2025. New token lifetime limits (90-day max) and TOTP 2FA restrictions become effective. Classic tokens will be revoked in November. Review changes and update your workflows now. Learn more.