npm scope

@onum-releases

LPM Firewall blocks 6 packages in the @onum-releases npm scope.

Jun 30, 2026

@onum-releases/api-client@1.0.3

OSV/OpenSSF confirms @onum-releases/api-client@1.0.3 as malicious package MAL-2026-6122. Malicious code in @onum-releases/api-client (npm)

Jun 30, 2026

@onum-releases/auth@1.0.3

Malware

OSV/OpenSSF confirms @onum-releases/auth@1.0.3 as malicious package MAL-2026-6123. Malicious code in @onum-releases/auth (npm)

Jun 30, 2026

@onum-releases/ixel@1.0.3

Malware

OSV/OpenSSF confirms @onum-releases/ixel@1.0.3 as malicious package MAL-2026-6124. Malicious code in @onum-releases/ixel (npm)

Jun 30, 2026

@onum-releases/sdk@1.0.3

Malware

OSV/OpenSSF confirms @onum-releases/sdk@1.0.3 as malicious package MAL-2026-6125. Malicious code in @onum-releases/sdk (npm)

Jun 30, 2026

@onum-releases/shared-components@1.0.3

Malware

OSV/OpenSSF confirms @onum-releases/shared-components@1.0.3 as malicious package MAL-2026-6126. Malicious code in @onum-releases/shared-components (npm)

Jun 30, 2026

@onum-releases/utils@1.0.2

Malware

OSV/OpenSSF confirms @onum-releases/utils@1.0.2 as malicious package MAL-2026-6127. Malicious code in @onum-releases/utils (npm)