diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml
index f3417164f..81fd7385e 100644
--- a/.github/workflows/releases.yml
+++ b/.github/workflows/releases.yml
@@ -18,7 +18,6 @@ env:
 jobs:
   main:
     permissions:
-      id-token: write
       packages: write
       contents: write
     runs-on: ubuntu-latest
@@ -96,5 +95,20 @@ jobs:
           file_glob: true
           body: "See the [CHANGELOG](https://github.com/gchq/CyberChef/blob/master/CHANGELOG.md) and [commit messages](https://github.com/gchq/CyberChef/commits/master) for details."
 
+  npm-publish:
+    permissions:
+      id-token: write
+      contents: read
+    needs: main
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Set node version
+        uses: actions/setup-node@v6
+        with:
+          node-version: ^24.5
+          registry-url: "https://registry.npmjs.org"
+
       - name: Publish to NPM
         run: npm publish