Supply Chain Incidents

MAL-2026-13078

Malicious code in boxy-rspack-optimize-sharing-runtime (npm)

MAL-2026-13090

Malicious code in boxy-test-host (npm)

MAL-2026-13087

Malicious code in boxy-temper (npm)

MAL-2026-13082

Malicious code in boxy-service (npm)

MAL-2026-13088

Malicious code in boxy-test-block (npm)

MAL-2026-13096

Malicious code in boxy-validate-implicit-deps (npm)

MAL-2026-13081

Malicious code in boxy-semver (npm)

MAL-2026-13093

Malicious code in boxy-tree-providers (npm)

MAL-2026-13104

Malicious code in bpm-foundation-auth (npm)

MAL-2026-13086

Malicious code in boxy-storybook-addon-changelog (npm)

MAL-2026-13085

Malicious code in boxy-story-header (npm)

MAL-2026-13095

Malicious code in boxy-use-what-changed (npm)

MAL-2026-13100

Malicious code in bpm-foundation-ai-assistant (npm)

MAL-2026-13105

Malicious code in bpm-foundation-base-configs (npm)

MAL-2026-13102

Malicious code in bpm-foundation-api (npm)

MAL-2026-13094

Malicious code in boxy-use-calls (npm)

MAL-2026-13097

Malicious code in boxy-webpack-test-utils (npm)

MAL-2026-13098

Malicious code in boxy-wrapper-rspack-plugin (npm)

MAL-2026-13101

Malicious code in bpm-foundation-analytics (npm)

MAL-2026-13099

Malicious code in boxy-wrapper-webpack-plugin (npm)

MAL-2026-13106

Malicious code in bpm-foundation-bundle-optimization (npm)

MAL-2026-13107

Malicious code in bpm-foundation-common (npm)

MAL-2026-13103

Malicious code in bpm-foundation-app-configs (npm)

MAL-2026-13109

Malicious code in bpm-foundation-delegate-docs (npm)