npm scope

@immobiliarelabs

LPM Firewall blocks 4 packages in the @immobiliarelabs npm scope.

Jun 30, 2026

@immobiliarelabs/backstage-plugin-gitlab@7.0.2

OpenSSF Malicious Packages via OSV confirms @immobiliarelabs/backstage-plugin-gitlab@7.0.2 as malicious (MAL-2026-6526): Malicious code in @immobiliarelabs/backstage-plugin-gitlab (npm)

Jun 30, 2026

@immobiliarelabs/backstage-plugin-gitlab-backend@7.0.2

Malware

OSV/OpenSSF confirms @immobiliarelabs/backstage-plugin-gitlab-backend@7.0.2 as malicious package MAL-2026-6527. Malicious code in @immobiliarelabs/backstage-plugin-gitlab-backend (npm)

Jun 30, 2026

@immobiliarelabs/backstage-plugin-ldap-auth@5.2.1

Malware

OSV/OpenSSF confirms @immobiliarelabs/backstage-plugin-ldap-auth@5.2.1 as malicious package MAL-2026-6528. Malicious code in @immobiliarelabs/backstage-plugin-ldap-auth (npm)

Jun 30, 2026

@immobiliarelabs/backstage-plugin-ldap-auth-backend@5.2.1

Malware

OSV/OpenSSF confirms @immobiliarelabs/backstage-plugin-ldap-auth-backend@5.2.1 as malicious package MAL-2026-6529. Malicious code in @immobiliarelabs/backstage-plugin-ldap-auth-backend (npm)