Supply Chain Incidents

MAL-2026-13061

Malicious code in boxy-maker-page-readiness (npm)

MAL-2026-13052

Malicious code in boxy-lcd (npm)

MAL-2026-13054

Malicious code in boxy-live (npm)

MAL-2026-13057

Malicious code in boxy-maker (npm)

MAL-2026-13051

Malicious code in boxy-lazy-loader (npm)

MAL-2026-13055

Malicious code in boxy-loader (npm)

MAL-2026-13062

Malicious code in boxy-maker-readiness (npm)

MAL-2026-13053

Malicious code in boxy-legacy-providers (npm)

MAL-2026-13060

Malicious code in boxy-maker-legacy (npm)

MAL-2026-13056

Malicious code in boxy-make-tokens-map (npm)

MAL-2026-13050

Malicious code in boxy-global-modules-webpack-plugin (npm)

MAL-2026-13058

Malicious code in boxy-maker-bus (npm)

MAL-2026-13065

Malicious code in boxy-maker-sticky (npm)

MAL-2026-13064

Malicious code in boxy-maker-skeleton (npm)

MAL-2026-13067

Malicious code in boxy-micro-story (npm)

MAL-2026-13063

Malicious code in boxy-maker-scroll (npm)

MAL-2026-13068

Malicious code in boxy-mif-tokens (npm)

MAL-2026-13077

Malicious code in boxy-render-unwrap (npm)

MAL-2026-13073

Malicious code in boxy-mops (npm)

MAL-2026-13066

Malicious code in boxy-maker-wave (npm)

MAL-2026-13069

Malicious code in boxy-mm-advisor (npm)

MAL-2026-13070

Malicious code in boxy-mm-server-loader (npm)

MAL-2026-13074

Malicious code in boxy-page-story (npm)

MAL-2026-13084

Malicious code in boxy-sticky-providers (npm)