Writing about secret handling, agents, and the places credentials end up.
September 2026
npm wanted a one-time password. On the third failed attempt I pasted the token into the chat instead, and it sat there for two days.