Account-Security on CuraDevOpshttps://curadevops.metacog.co.kr/tags/account-security/Recent content in Account-Security on CuraDevOpsHugoen-usFri, 11 Sep 2026 14:43:59 +0000npm extends 72-hour security hold to all accounts after recovery-code sign-inhttps://curadevops.metacog.co.kr/insights/2026-09-11-npm-extends-recovery-code-security-holds-to-all-accounts/Fri, 11 Sep 2026 14:43:59 +0000https://curadevops.metacog.co.kr/insights/2026-09-11-npm-extends-recovery-code-security-holds-to-all-accounts/<ul> <li><strong>Platform/SRE — Skip</strong></li> <li><strong>CI/CD — Learn:</strong> npm now applies a 72-hour security hold to any account following a recovery-code sign-in, broadening a protection previously limited to high-impact accounts; no pipeline changes are needed since CI automation should use tokens, not recovery codes, but this informs npm supply-chain security posture.</li> <li><strong>Leader — Skip</strong></li> </ul>