Suspicious npm OIDC publish of @dforge-core/dforge-mcp package

Ibrahim Saud@tektrix

•updated Sep 21, 2026•0•0•4

Detects npm package publication events specifically related to the @dforge-core/dforge-mcp library, including detection of OIDC-based trusted publishing mechanisms to identify potential supply chain compromise or unauthorized releases.