I'm not super-familiar with ADO's npm feeds, but I don't think you're the only one who's had this issue, based on this old post.
Since that post was made, we added the "Authentication" drop down, and you should select Bearer for that. Then, keep Username empty.
If you do that, the Password field will be used as the Bearer token.
Can you try taht, and let us know if it works?