Show HN: Auto-Unpublish NPM Packages Published Outside CI

A lot of vendors and open-source projects shared guidance on protecting users from downloading malicious NPM packages after the Shai-Hulud campaign — but almost nothing focused on protecting maintainers from accidentally (or maliciously) publishing them.

So we built a small tool that continuously monitors your NPM packages and automatically unpublishes any version not produced by your CI workflow.