GitHub has made staged publishing generally available for npm, introducing a mandatory 2FA-authenticated human approval gate before any package version becomes installable, including releases from automated CI/CD pipelines. This closes two persistent supply chain attack vectors: unauthorized automated publishing via compromised CI credentials and non-registry source substitution attacks. The controls arrive as threat group TeamPCP actively poisons open-source packages at scale, signaling that the npm ecosystem has crossed from theoretical risk to actively exploited territory.