ZegnatCould have been disabled by npmjs.org because of one of the many supply chain things going on this year, or could just have been that Aimee had it lapse. I am guessing it is a manual token that she added to the repos secrets?
ZegnatLots of supply chain related stuff been doing the rounds in Node land. People are locking down the running of scripts and delaying getting updated packages for a few days, as so far most attacks are caught within hours to a day so if you only get updates after 3 days you would not have been targetted ...