diff --git a/lib/config/decrypt.spec.ts b/lib/config/decrypt.spec.ts
index fd521049c1d5f00a78ffa09254f80a74797f41e0..d3fe1a4f9881377f944cfd5d061a49d8e5f7d2ba 100644
--- a/lib/config/decrypt.spec.ts
+++ b/lib/config/decrypt.spec.ts
@@ -36,7 +36,8 @@ describe('config/decrypt', () => {
     });
     it('replaces npm token placeholder in npmrc', () => {
       config.privateKey = privateKey;
-      config.npmrc = '//registry.npmjs.org/:_authToken=${NPM_TOKEN}\n'; // eslint-disable-line no-template-curly-in-string
+      config.npmrc =
+        '//registry.npmjs.org/:_authToken=${NPM_TOKEN}\n//registry.npmjs.org/:_authToken=${NPM_TOKEN}\n'; // eslint-disable-line no-template-curly-in-string
       config.encrypted = {
         npmToken:
           'FLA9YHIzpE7YetAg/P0X46npGRCMqn7hgyzwX5ZQ9wYgu9BRRbTiBVsUIFTyM5BuP1Q22slT2GkWvFvum7GU236Y6QiT7Nr8SLvtsJn2XUuq8H7REFKzdy3+wqyyWbCErYTFyY1dcPM7Ht+CaGDWdd8u/FsoX7AdMRs/X1jNUo6iSmlUiyGlYDKF+QMnCJom1VPVgZXWsGKdjI2MLny991QMaiv0VajmFIh4ENv4CtXOl/1twvIl/6XTXAaqpJJKDTPZEuydi+PHDZmal2RAOfrkH4m0UURa7SlfpUlIg+EaqbNGp85hCYXLwRcEET1OnYr3rH1oYkcYJ40any1tvQ==',
@@ -45,7 +46,7 @@ describe('config/decrypt', () => {
       expect(res.encrypted).not.toBeDefined();
       expect(res.npmToken).not.toBeDefined();
       expect(res.npmrc).toEqual(
-        '//registry.npmjs.org/:_authToken=abcdef-ghijklm-nopqf-stuvwxyz\n'
+        '//registry.npmjs.org/:_authToken=abcdef-ghijklm-nopqf-stuvwxyz\n//registry.npmjs.org/:_authToken=abcdef-ghijklm-nopqf-stuvwxyz\n'
       );
     });
     it('appends npm token in npmrc', () => {
diff --git a/lib/config/decrypt.ts b/lib/config/decrypt.ts
index 7fa3a9c860c7a7b82e3e1f72bebf461484ea52a3..550af3e5ed7d1d78e17c5f55c37b993bbe42c5f5 100644
--- a/lib/config/decrypt.ts
+++ b/lib/config/decrypt.ts
@@ -54,7 +54,7 @@ export function decryptConfig(
                 if (decryptedConfig.npmrc.includes('${NPM_TOKEN}')) {
                   logger.debug('Replacing ${NPM_TOKEN} with decrypted token');
                   decryptedConfig.npmrc = decryptedConfig.npmrc.replace(
-                    '${NPM_TOKEN}',
+                    /\${NPM_TOKEN}/g,
                     token
                   );
                 } else {