Please don't use pnpm. Use Yarn or npm, those are better package managers for you.
OS and politics should not be mixed. Your actions do nothing but say that you will "weaponize" an open source library to match one goal "punishing Russians" but not punishing other perpetrators.
If every software maintainer started to apply its own political views and ban some users the entire ecosystem would implode.
Should muslim developers ban all chinese users for the uighur concentration camps, and myanmaris for their treatment of Rohingya?
Should I, a Polish developer, ban Ukrainians because they hail as a hero and title streets to a criminal like Bandera that killed my own polish family in eastern galicia during world war two?
Where and when would this hysteria end?
I have sympathy for your situation, but not for such solutions. They damage everyone, including OSS.
Actually america has been by far the biggest aggressor on the planrt in tge last decades, and it killed the most civilians outside Africa.
That's my problem with this massive anti russian hysteria in software.
You only appear careless, racist and naive. It's better to avoid politics in software and business, because if you don't you have to basically ban anyone.