Malicious code in boxy-use-calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e7b8d0b1d87131f56439454c512c68c367ed421c04c7a4bc165c7aeb6acdd6 index.js unconditionally requires bridge.js, whose top-level main runs on import. bridge.js selects a platform-specific payload path, downloads an...

MAL-2026-13094 Malicious code in boxy-use-calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e7b8d0b1d87131f56439454c512c68c367ed421c04c7a4bc165c7aeb6acdd6 index.js unconditionally requires bridge.js, whose top-level main runs on import. bridge.js selects a platform-specific payload path, downloads an...