diff --git a/lib/modules/manager/npm/post-update/index.ts b/lib/modules/manager/npm/post-update/index.ts
index 869c48df4f57225d19ce96ba1b75e5f6fb2a87d4..52e8b1f8a88969345067816bff3abcc5bc845ac9 100644
--- a/lib/modules/manager/npm/post-update/index.ts
+++ b/lib/modules/manager/npm/post-update/index.ts
@@ -526,17 +526,17 @@ export async function getAdditionalFiles(
     NODE_ENV: 'dev',
   };
 
-  let token = '';
+  let token: string | undefined;
   try {
-    ({ token = '' } = hostRules.find({
+    ({ token } = hostRules.find({
       hostType: config.platform,
       url: 'https://api.github.com/',
     }));
-    token += '@';
+    token = token ? `${token}@` : token;
   } catch (err) {
     logger.warn({ err }, 'Error getting token for packageFile');
   }
-  const tokenRe = regEx(`${token}`, 'g', false);
+  const tokenRe = regEx(`${token ?? ''}`, 'g', false);
   const localDir = GlobalConfig.get('localDir')!;
   for (const npmLock of dirs.npmLockDirs) {
     const lockFileDir = upath.dirname(npmLock);