GitHub restricts npm bypass-2FA granular access tokens
Tokens can no longer perform sensitive account, org, and package management actions. They now require an interactive 2FA challenge.
See the latest news and media coverage for GitHub. We track all announcements, press releases, and industry mentions in real time, all in one place.
AI-powered developer platform
github.comLast updated
In short: GitHub reached a $100M milestone in community contributions to open-source maintainers while enhancing its AI and security platforms.
Tokens can no longer perform sensitive account, org, and package management actions. They now require an interactive 2FA challenge.
The playground, model catalog, inference API, and BYOK are no longer available, completing the retirement announced July 1.
New models will be on by default for Business and Enterprise plans, with an opt-out control for governance.
Newly published packages are scanned before becoming available, with a short delay. Dual-use packages require metadata declaration and 2FA-enforced publishing.
Microsoft will launch a unified Copilot app in 2026, combining chat, coding, collaboration, and AI agents into one experience ...
It was fun while it lasted, but it's starting to look like the end for flat-rate AI plans as we know them, with GitHub being...
A 150MB binary commit froze FreeBSD's ports tree in July 2026, breaking GitHub mirrors and introducing licensing concerns. The project responded with history rewrites, verification...
Government orders GitHub to remove Bluetooth app Bitchat over security risks amid internet restrictions during protests, says Jack Dorsey.
Track GitHub and your other target companies to get real-time alerts and weekly summaries delivered straight to your inbox.
Browse news for competitors to GitHub and other trending companies.