CI/CD Workflow Modified to Auto-Publish on Push to Main

Ibrahim Saud@tektrix

•updated Sep 21, 2026•0•0•1

Detects the modification of a GitHub Actions release workflow that removes manual approval/gate requirements and introduces a push-to-main trigger, followed closely by an automated npm publish event. This behavior suggests an attempt to establish an unattended supply chain release path.