Supply Chain Incidents

MAL-2026-13050

Malicious code in boxy-global-modules-webpack-plugin (npm)

MAL-2026-13058

Malicious code in boxy-maker-bus (npm)

MAL-2026-13065

Malicious code in boxy-maker-sticky (npm)

MAL-2026-13064

Malicious code in boxy-maker-skeleton (npm)

MAL-2026-13067

Malicious code in boxy-micro-story (npm)

MAL-2026-13063

Malicious code in boxy-maker-scroll (npm)

MAL-2026-13068

Malicious code in boxy-mif-tokens (npm)

MAL-2026-13077

Malicious code in boxy-render-unwrap (npm)

MAL-2026-13073

Malicious code in boxy-mops (npm)

MAL-2026-13066

Malicious code in boxy-maker-wave (npm)

MAL-2026-13069

Malicious code in boxy-mm-advisor (npm)

MAL-2026-13070

Malicious code in boxy-mm-server-loader (npm)

MAL-2026-13074

Malicious code in boxy-page-story (npm)

MAL-2026-13084

Malicious code in boxy-sticky-providers (npm)

MAL-2026-13071

Malicious code in boxy-mmb-deps-pvm-plugin (npm)

MAL-2026-13075

Malicious code in boxy-pkg-deps-hash (npm)

MAL-2026-13072

Malicious code in boxy-mmb-types (npm)

MAL-2026-13091

Malicious code in boxy-test-maker (npm)

MAL-2026-13076

Malicious code in boxy-pkg-path (npm)

MAL-2026-13079

Malicious code in boxy-scroll-providers (npm)

MAL-2026-13080

Malicious code in boxy-search-workspace-substrings (npm)

MAL-2026-13089

Malicious code in boxy-test-block-fixture (npm)

MAL-2026-13092

Malicious code in boxy-tokens (npm)

MAL-2026-13083

Malicious code in boxy-sitree (npm)