Supply Chain Incidents

MAL-2026-13043

Malicious code in boxy-expander-contract (npm)

MAL-2026-13040

Malicious code in boxy-devtools-tokens (npm)

MAL-2026-13039

Malicious code in boxy-devtools (npm)

MAL-2026-13048

Malicious code in boxy-fixture-sb (npm)

MAL-2026-13036

Malicious code in boxy-debugger (npm)

MAL-2026-13037

Malicious code in boxy-demo-tokens (npm)

MAL-2026-13042

Malicious code in boxy-esm-shims (npm)

MAL-2026-13038

Malicious code in boxy-deps-calculator (npm)

MAL-2026-13046

Malicious code in boxy-fixture-pendel (npm)

MAL-2026-13044

Malicious code in boxy-fixture (npm)

MAL-2026-13045

Malicious code in boxy-fixture-paperclip (npm)

MAL-2026-13059

Malicious code in boxy-maker-extendable-minihost (npm)

MAL-2026-13047

Malicious code in boxy-fixture-pfa (npm)

MAL-2026-13049

Malicious code in boxy-get-retry-url (npm)

MAL-2026-13061

Malicious code in boxy-maker-page-readiness (npm)

MAL-2026-13052

Malicious code in boxy-lcd (npm)

MAL-2026-13054

Malicious code in boxy-live (npm)

MAL-2026-13057

Malicious code in boxy-maker (npm)

MAL-2026-13051

Malicious code in boxy-lazy-loader (npm)

MAL-2026-13055

Malicious code in boxy-loader (npm)

MAL-2026-13062

Malicious code in boxy-maker-readiness (npm)

MAL-2026-13053

Malicious code in boxy-legacy-providers (npm)

MAL-2026-13060

Malicious code in boxy-maker-legacy (npm)

MAL-2026-13056

Malicious code in boxy-make-tokens-map (npm)