npm logged three incidents in 26 hours across publish, install, and audit
- Sources: publish incident, audit incident, discussion
- Summary: Publish and install failures ran from 2026-09-03 21:42 UTC to 23:21 UTC. The security audit endpoint was degraded from 2026-09-04 11:29 UTC to 13:48 UTC.
- Why it matters: A CI pipeline that treats npm audit as a blocking gate failed on registry availability rather than on any finding.