If 2-factor-authentication is enabled, an access token is needed in the place of password. Create one according to the steps here with the access for:
- read:packages
- write:packages
- delete:packages
“Error authenticating user: Must specify two-factor authentication OTP code” with NPM Login