Supply Chain Incidents

MAL-2026-13034

Malicious code in boxy-contract (npm)

MAL-2026-13029

Malicious code in boxy-add-link (npm)

MAL-2026-13023

Malicious code in bnpl-core (npm)

MAL-2026-13028

Malicious code in boxy-adapter-tramvai (npm)

MAL-2026-13020

Malicious code in bnpl-blocks-types (npm)

MAL-2026-13024

Malicious code in bnpl-forms-test-utils (npm)

MAL-2026-13021

Malicious code in bnpl-blocks-types-gen (npm)

MAL-2026-13041

Malicious code in boxy-docusaurus-plugin-content-docs-light (npm)

MAL-2026-13026

Malicious code in bnpl-molecule-mobile-bnpl-selector (npm)

MAL-2026-13035

Malicious code in boxy-cook (npm)

MAL-2026-13043

Malicious code in boxy-expander-contract (npm)

MAL-2026-13040

Malicious code in boxy-devtools-tokens (npm)

MAL-2026-13039

Malicious code in boxy-devtools (npm)

MAL-2026-13048

Malicious code in boxy-fixture-sb (npm)

MAL-2026-13036

Malicious code in boxy-debugger (npm)

MAL-2026-13037

Malicious code in boxy-demo-tokens (npm)

MAL-2026-13042

Malicious code in boxy-esm-shims (npm)

MAL-2026-13038

Malicious code in boxy-deps-calculator (npm)

MAL-2026-13046

Malicious code in boxy-fixture-pendel (npm)

MAL-2026-13044

Malicious code in boxy-fixture (npm)

MAL-2026-13045

Malicious code in boxy-fixture-paperclip (npm)

MAL-2026-13059

Malicious code in boxy-maker-extendable-minihost (npm)

MAL-2026-13047

Malicious code in boxy-fixture-pfa (npm)

MAL-2026-13049

Malicious code in boxy-get-retry-url (npm)