The "single maintainer, global blast radius" precondition behind protestware predates it — left-pad (2016) and Notepad++'s "Stand With Hong Kong" (2020)

The structural fact that protestware exploits — that one maintainer's unilateral action over a small, deeply-depended-upon package can cascade across the internet — predates the 2022 node-ipc sabotage (claim-node-ipc-2022-maintainer-shipped-geotargeted-wiper).

left-pad (2016). On 22 March 2016 the developer Azer Koçulu unpublished all of his npm packages after npm, Inc. transferred the package name kik to Kik Messenger over a trademark dispute. One of the removed packages, left-pad — roughly eleven lines of code — was a transitive dependency of large parts of the JavaScript ecosystem (including Babel and React tooling). Its sudden disappearance returned 404s and broke builds worldwide. This was not political protest in the protestware sense; it was a naming dispute. But it established the same precondition protestware later weaponized, and prompted npm to change its unpublish policy.

Notepad++ "Stand With Hong Kong" (2020). The Notepad++ editor shipped editions explicitly named for political causes — v7.8.9 "Stand With Hong Kong" (July 2020) and a "Free Uyghur" edition — a benign form of protestware that carries a political statement in the release itself rather than a destructive payload. China blocked the project's download page in response.

Together the two cases mark the endpoints of a spectrum the 2026 typology (claim-protestware-named-in-2026-oss-typology) later formalized: from non-political self-sabotage with global blast radius (left-pad) to benign political statement-ware (Notepad++) to malignant geo-targeted payloads (node-ipc). All three rest on the same fragility the vault tracks into the AI era — claim-mj-rathbun-ungated-agent-published-hit-piece and the agent-supply-chain frames claim-toctou-named-frame-browser-use-agents and claim-confused-deputy-2026-ai-agent-security-frame.