diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index e62a4a2..4b8cf97 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -26,8 +26,24 @@ jobs:
     needs: release-please
     runs-on: ubuntu-latest
     if: ${{ needs.release-please.outputs.release_created }}
+    permissions:
+      packages: write
+      contents: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
-      # TODO: create package and upload to GitHub
+      - name: Set up node 20.x
+        uses: actions/setup-node@v3
+        with:
+          node-version: "20.x"
+          cache: "npm"
+          cache-dependency-path: |
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Publish
+        run: npm publish
+        env:
+          NODE_AUTH_TOKEN: ${{secrets.GITHUB_TOKEN}}
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..220cb45
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1 @@
+@bihealth:registry=https://npm.pkg.github.com
diff --git a/package.json b/package.json
index 74a1353..423509b 100644
--- a/package.json
+++ b/package.json
@@ -10,6 +10,9 @@
     "format": "prettier --write src/ *.ts *.mts *.json",
     "format:check": "prettier --list-different src/ *.ts *.mts *.json"
   },
+  "publishConfig": {
+    "@bihealth:registry": "https://npm.pkg.github.com"
+  },
   "dependencies": {
     "@mdi/font": "^7.3.67",
     "@reactgular/chunks": "^1.0.1",