NPM flagging all versions of opensearch-project as compromised

[pablo]

@Aquacephale See the following post.

Security Advisory: Compromised npm Development Packages

UPDATE: 15-May-2026 Resolved. GitHub organization is unlocked, CI/CD pipelines & GitHub Actions secrets have been rotated, and repositories are back online. Thank you for your patience. =============================== Security Advisory: Compromised npm Development Packages The OpenSearch Project has identified and remediated a supply chain attack involving the npm registry. A malicious actor gained unauthorized access to publish artifacts containing malware. Impacted Versions: open source…