Supply Chain Incidents

MAL-2026-13071

Malicious code in boxy-mmb-deps-pvm-plugin (npm)

MAL-2026-13075

Malicious code in boxy-pkg-deps-hash (npm)

MAL-2026-13072

Malicious code in boxy-mmb-types (npm)

MAL-2026-13091

Malicious code in boxy-test-maker (npm)

MAL-2026-13076

Malicious code in boxy-pkg-path (npm)

MAL-2026-13079

Malicious code in boxy-scroll-providers (npm)

MAL-2026-13080

Malicious code in boxy-search-workspace-substrings (npm)

MAL-2026-13089

Malicious code in boxy-test-block-fixture (npm)

MAL-2026-13092

Malicious code in boxy-tokens (npm)

MAL-2026-13083

Malicious code in boxy-sitree (npm)

MAL-2026-13078

Malicious code in boxy-rspack-optimize-sharing-runtime (npm)

MAL-2026-13090

Malicious code in boxy-test-host (npm)

MAL-2026-13087

Malicious code in boxy-temper (npm)

MAL-2026-13082

Malicious code in boxy-service (npm)

MAL-2026-13088

Malicious code in boxy-test-block (npm)

MAL-2026-13096

Malicious code in boxy-validate-implicit-deps (npm)

MAL-2026-13081

Malicious code in boxy-semver (npm)

MAL-2026-13093

Malicious code in boxy-tree-providers (npm)

MAL-2026-13104

Malicious code in bpm-foundation-auth (npm)

MAL-2026-13086

Malicious code in boxy-storybook-addon-changelog (npm)

MAL-2026-13085

Malicious code in boxy-story-header (npm)

MAL-2026-13095

Malicious code in boxy-use-what-changed (npm)

MAL-2026-13100

Malicious code in bpm-foundation-ai-assistant (npm)

MAL-2026-13105

Malicious code in bpm-foundation-base-configs (npm)