GitHub Expires Unvalidated npm Configs

GitHub expires unvalidated npm trusted publishing configurations 48 hours after creation following a security flaw. Researchers found attackers could hijack over 1,500 packages downloaded more than 10 million times by claiming abandoned repository slugs to publish malicious code without credentials.